VYPR
Unrated severityNVD Advisory· Published Jan 15, 2026· Updated Mar 5, 2026

Tagstoo 2.0.1 - Stored XSS to RCE

CVE-2021-47843

Description

Tagstoo 2.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious payloads through files or custom tags. Attackers can execute arbitrary JavaScript code to spawn system processes, access files, and perform remote code execution on the victim's computer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Tagstoo/Tagstoollm-create2 versions
    = 2.0.1+ 1 more
    • (no CPE)range: = 2.0.1
    • (no CPE)range: 2.0.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.