CVE-2021-28796

6.1 mediumEPSS 0.8%

Medium (6.1) in increments qiita\. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in qiita-markdown 0.33.0.

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers.

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-11-01)
CWE: CWE-79
Published: 2021-03-18 16:15 UTC
Modified: 2026-06-17 03:46 UTC
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-f2c9-5jqw-3xh3	RubyGems	qiita-markdown	<0.33.0	0.33.0