CVE-2021-47841

5.1 mediumEPSS 0.4%

Medium (5.1). EPSS 0.4% chance of exploitation in the next 30 days.

SnipCommand 0.1.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into command snippets. Attackers can execute arbitrary code by embedding malicious JavaScript that triggers remote command execution through file or title inputs.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-01-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/gurayyarar/SnipCommand
https://imgur.com/a/I2reH1M
https://www.exploit-db.com/exploits/49829
https://www.vulncheck.com/advisories/snipcommand-persistent-cross-site-scripting
https://www.vulncheck.com/advisories/snipcommand-persistent-cross-site-scripting

Check your stack JSON