CVE-2021-33850

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3

published November 19, 2021

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01598 · 75.6th percentile
Published
2021-11-19T15:52Z
EPSS history
Timeline
  • 19 NOV 15:52Z
    There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3
    cvelistv5