Justwriting Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Justwriting Project records in CISA KEV

No Justwriting Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Justwriting 1 record LOW

Records

1 record

TI-2021-18247 CVE-2021-41467 · GHSA-gxmc-5wj3-jx64

Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in…

LOW 34

Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03601 Published 2021-10-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0