← CVE Intelligence

CVE-2021-20727

Hendrik Erz / Zettlr PUBLISHED

Description (CNA)

Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.

Affected (CNA)

Vendor / productVersions
Hendrik Erz / Zettlraffected from 0.20.0 to 1.8.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.