CVE-2021-20727

Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet…

published May 27, 2021

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01036 · 63.6th percentile
Published
2021-05-27T08:05Z
EPSS history
Timeline
  • 27 MAY 08:05Z
    Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet…
    cvelistv5