CVE-2021-43635
EUVD-2021-3054704.02.2022, 18:15
A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| codexnotes | codex | 𝑥 < 1.4.0 |
𝑥
= Vulnerable software versions