CVE-2021-3780 HIGH

CVE-2021-3780: Cross-site Scripting (XSS) - Stored in chocobozzz/peertube

Vendor Chocobozzz
Product chocobozzz/peertube
Weakness CWE-79 · XSS
Published September 15, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Key dates

02Disclosure timeline

September 15, 2021 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-5791 Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting CVE-2023-53906 ProjectSend r1605 Stored Cross-Site Scripting via Custom Assets Page CVE-2026-32545 WordPress Taboola Pixel plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-34405 Nuxt OG Image vulnerable to reflected XSS via query parameter injection into HTML attributes CVE-2023-24403 WordPress bbPress Voting Plugin <= 2.1.11.0 is vulnerable to Cross-Site Scripting (XSS)