cvedb.io
CVE-2021-3271
MEDIUM · CVSS 4.8
EPSS exploitation probability: 0%
Published 2021-02-18T19:15:13.273 · Last modified 2026-06-17T04:04:52.257

Summary

PressBooks 5.17.3 contains a cross-site scripting (XSS). Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS.

Affected products

pressbooks — pressbooks

Does this affect you?

Add your gear to cvedb and we'll alert you only when pressbooks ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.