Archive

27 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /27 April 2021 →

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 6.1

CVE-2021-29272

Cross-site scripting in bluemonday

bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string.

gitea github.com/microcosm-cc/bluemonday golang-github-microcosm-cc-bluemonday Ubuntu Alpine Go

Mar 27, 2021
Unscored —

CVE-2021-29271

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is relate…

Mar 27, 2021