Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-36603
6.1
MEDIUMCVSS v3
Published
January 9, 2023
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".
arendst/Tasmota
GitHubAlternative firmware for ESP8266 and ESP32 based devices with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP, Serial or KNX. Full documentation at
GitHubAlternative firmware for ESP8266 and ESP32 based devices with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP, Serial or KNX. Full documentation at= 6.5.0NVD
NPM