CVE-2021-44566

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-44566
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44566.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-44566
Aliases
Published
2022-02-24T15:15:24.150Z
Modified
2026-07-09T02:48:48.969465Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php.

References

Affected packages

Git / github.com/francoisjacquet/rosariosis

Affected ranges

Type
GIT
Repo
https://github.com/francoisjacquet/rosariosis
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
fad593be603afc7f25deff407caaaab8cbdd3bdf
Database specific 
{
    "cpe": "cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.3"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

2.*
2.9.8
v1.*
v1.2
v1.2.1
v1.2.2
v1.3
v1.3.1
v1.3.2
v2.*
v2.0
v2.0.1
v2.0.2
v2.0.3
v2.0b
v2.0b.2
v2.0b.3
v2.0b3
v2.0b4
v2.1
v2.1.1
v2.2
v2.2.1
v2.2.2
v2.2.3
v2.2.4
v2.2.5
v2.3
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.4
v2.4.1
v2.5
v2.5.1
v2.5.2
v2.5.3
v2.5.3b
v2.5.4
v2.5.5
v2.5.6
v2.5.7
v2.5.8
v2.6
v2.6.1
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6
v2.7
v2.7-beta
v2.7.1
v2.7.2
v2.7.3
v2.8
v2.8-beta
v2.8-beta2
v2.8-beta3
v2.8-beta4
v2.8.1
v2.8.10
v2.8.11
v2.8.12
v2.8.13
v2.8.14
v2.8.15
v2.8.16
v2.8.17
v2.8.18
v2.8.19
v2.8.2
v2.8.20
v2.8.20bis
v2.8.21
v2.8.22
v2.8.23
v2.8.24
v2.8.25
v2.8.26
v2.8.27
v2.8.3
v2.8.3bis
v2.8.4
v2.8.5
v2.8.6
v2.8.7
v2.8.8
v2.8.9
v2.9
v2.9.1
v2.9.10
v2.9.11
v2.9.12
v2.9.13
v2.9.14
v2.9.15
v2.9.2
v2.9.3
v2.9.4
v2.9.5
v2.9.6
v2.9.8
v2.9.9
v3.*
v3.0
v3.0.1
v3.0.2
v3.1
v3.1.1
v3.1.2
v3.2
v3.3
v3.3-beta
v3.3.1
v3.3.2
v3.3.3
v3.3.4
v3.4
v3.4.1
v3.4.2
v3.4.3
v3.5
v3.5.1
v3.5.2
v3.5.3
v3.6
v3.6-beta
v3.6.1
v3.7
v3.7-beta
v3.7.1
v3.8
v3.8-beta
v3.8-beta2
v3.9
v3.9-beta
v3.9.1
v4.*
v4.0
v4.0-beta
v4.0-beta2
v4.0-beta3
v4.1
v4.2-beta
v4.3-beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44566.json"

Git / gitlab.com/francoisjacquet/rosariosis

Affected ranges

Type
GIT
Repo
https://gitlab.com/francoisjacquet/rosariosis
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
fad593be603afc7f25deff407caaaab8cbdd3bdf
Fixed
81886abb45a32e802151660de674f084afaef3aa
Database specific 
{
    "cpe": "cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

2.*
2.9.8
v1.*
v1.2
v1.2.1
v1.2.2
v1.3
v1.3.1
v1.3.2
v2.*
v2.0
v2.0.1
v2.0.2
v2.0.3
v2.0b
v2.0b.2
v2.0b.3
v2.0b3
v2.0b4
v2.1
v2.1.1
v2.2
v2.2.1
v2.2.2
v2.2.3
v2.2.4
v2.2.5
v2.3
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.4
v2.4.1
v2.5
v2.5.1
v2.5.2
v2.5.3
v2.5.3b
v2.5.4
v2.5.5
v2.5.6
v2.5.7
v2.5.8
v2.6
v2.6.1
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6
v2.7
v2.7-beta
v2.7.1
v2.7.2
v2.7.3
v2.8
v2.8-beta
v2.8-beta2
v2.8-beta3
v2.8-beta4
v2.8.1
v2.8.10
v2.8.11
v2.8.12
v2.8.13
v2.8.14
v2.8.15
v2.8.16
v2.8.17
v2.8.18
v2.8.19
v2.8.2
v2.8.20
v2.8.20bis
v2.8.21
v2.8.22
v2.8.23
v2.8.24
v2.8.25
v2.8.26
v2.8.27
v2.8.3
v2.8.3bis
v2.8.4
v2.8.5
v2.8.6
v2.8.7
v2.8.8
v2.8.9
v2.9
v2.9.1
v2.9.10
v2.9.11
v2.9.12
v2.9.13
v2.9.14
v2.9.15
v2.9.2
v2.9.3
v2.9.4
v2.9.5
v2.9.6
v2.9.8
v2.9.9
v3.*
v3.0
v3.0.1
v3.0.2
v3.1
v3.1.1
v3.1.2
v3.2
v3.3
v3.3-beta
v3.3.1
v3.3.2
v3.3.3
v3.3.4
v3.4
v3.4.1
v3.4.2
v3.4.3
v3.5
v3.5.1
v3.5.2
v3.5.3
v3.6
v3.6-beta
v3.6.1
v3.7
v3.7-beta
v3.7.1
v3.8
v3.8-beta
v3.8-beta2
v3.9
v3.9-beta
v3.9.1
v4.*
v4.0
v4.0-beta
v4.0-beta2
v4.0-beta3
v4.1
v4.2-beta
v4.3-beta

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44566.json"