CVE-2021-3853: Cross-site Scripting (XSS) - Stored in chaskiq/chaskiq
Published Jan 17, 2022
·Updated
chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Software
1 affected component
chaskiq chaskiq<0.9.8
Remediation
Event History
Jan 17, 2022
CVE Published
via MITRE·11:25 AM
Data Sourced
via MITRE·11:25 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-3853?
CVE-2021-3853 has a high severity due to its potential for exploitation through stored cross-site scripting.
2
How do I fix CVE-2021-3853?
To fix CVE-2021-3853, update your Chaskiq installation to version 0.9.8 or later.
3
What is the impact of CVE-2021-3853 on affected systems?
The impact of CVE-2021-3853 includes the ability for attackers to execute arbitrary scripts in the context of the affected user's session.
4
Which versions of Chaskiq are affected by CVE-2021-3853?
Chaskiq versions prior to 0.9.8 are affected by CVE-2021-3853.
5
What type of vulnerability is CVE-2021-3853 classified as?
CVE-2021-3853 is classified as a Cross-site Scripting (XSS) vulnerability.