← All advisories

Medium severity6.1NVD Advisory· Published Nov 24, 2021· Updated Jun 17, 2026

CVE-2021-20848

CVE-2021-20848

Description

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/schollz/rwtxtGo	< 1.8.6	1.8.6

Affected products

3

Zack Scholl/Rwtxtv5
Range: versions prior to v1.8.6
Rwtxt Project/Rwtxt
cpe:2.3:a:rwtxt_project:rwtxt:*:*:*:*:*:*:*:*
Range: <1.8.6
ghsa-coords
pkg:golang/github.com/schollz/rwtxt
Range: < 1.8.6

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-458f-26r3-x2c3ghsaADVISORY
jvn.jp/en/jp/JVN22515597/index.htmlnvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-20848ghsaADVISORY
github.com/schollz/rwtxt/commit/c09fb17375c4c47b49524c688288af1fe20e730aghsaWEB

News mentions

0

No linked articles in our index yet.