CVE-2021-31330

A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier

published May 11, 2022

CVSS
—
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authenticated attacker may inject malicious Javascript code when using Markdown editing within the application which remains persistent.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00822 · 56.9th percentile
Published
2022-05-11T17:34Z
EPSS history
Timeline
  • 11 MAY 17:34Z
    A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier
    cvelistv5