CVE-2021-3163

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart…

published April 12, 2021

CVSS
—
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended behavior in a web browser

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01311 · 70.4th percentile
Published
2021-04-12T20:35Z
EPSS history
Timeline
  • 12 APR 20:35Z
    A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart…
    cvelistv5