Vulnerability · Published Dec 21, 2022 · Assigned by VulDB

CVE-2021-4272studygolang topics.js cross site scripting

Low 3.5

In plain English

A low-severity security flaw in studygolang from unspecified. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)3.5Low

Exploit odds (30 days)0.4%top 63.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the argument contentHtml leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is 0fb30f9640bd5fa0cae58922eac6c00bb1a94391. It is recommended to apply a patch to fix this issue. The identifier VDB-216477 was assigned to this vulnerability.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/studygolang/studygolang	no fix listed	GHSA-gw62-c7w4-x449

Affected products (as reported)

Vendor	Product	Versions
unspecified	studygolang	n/a

Weakness: CWE-707 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References