CVE-2021-47841CWE-79

SnipCommand 0.1.0 - Persistent Cross-Site Scripting

Medium · published January 16, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

SnipCommand 0.1.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into command snippets. Attackers can execute arbitrary code by embedding malicious JavaScript that triggers remote command execution through file or title inputs.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-01-16T19:09Z
EPSS history
Timeline
  • 16 JAN 19:09Z
    SnipCommand 0.1.0 - Persistent Cross-Site Scripting
    cvelistv5