Medium severity6.1NVD Advisory· Published Jul 19, 2021· Updated Jun 17, 2026
CVE-2021-34817
CVE-2021-34817
Description
A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Etherpad/Etherpaddescription
- Range: <1.8.14
Patches
Vulnerability mechanics
References
4- etherpad.orgnvdPatchVendor Advisory
- github.com/ether/etherpad-lite/releases/tag/1.8.14nvdPatchRelease NotesThird Party Advisory
- github.com/ether/etherpad-lite/commit/a7968115581e20ef47a533e030f59f830486bdfanvdExploitPatchThird Party Advisory
- blog.sonarsource.com/etherpad-code-execution-vulnerabilitiesnvdThird Party Advisory
News mentions
0No linked articles in our index yet.