← Back

Tad Book3 Project

tad_book3_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Tad Book3
tad_book3
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-41974
1Tad Book3 Project
1Tad Book3
Nov 21, 2024
Oct 8, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary content of books without permission.
CVE-2021-41563
1Tad Book3 Project
1Tad Book3
Nov 21, 2024
Oct 8, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.