CVE-2021-42838

6.1 mediumEPSS 0.6%

Medium (6.1) in vice webopac. EPSS 0.6% chance of exploitation in the next 30 days.

Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thus unauthenticated attackers can inject JavaScript syntax remotely, and further perform reflective XSS attacks.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vice:webopac

References

https://www.twcert.org.tw/tw/cp-132-5286-b92c8-1.html
https://www.twcert.org.tw/tw/cp-132-5286-b92c8-1.html

Check your stack JSON