CVE-2021-34817

A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importin...

Original description

The description as published by the source.

A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory blog.sonarsource.com
patch etherpad.org
patch github.com
patch github.com