Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Tad_book3
(Tad_book3_project)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-10-08 | CVE-2021-41563 | Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks. | Tad_book3 | 6.1 | ||
| 2021-10-08 | CVE-2021-41974 | Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary content of books without permission. | Tad_book3 | 9.1 |