CVE-2021-30151: Contribsys Sidekiq

Medium severity, CVSS 6.1. EPSS: 4.2% chance of exploitation in the next 30 days.

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.

Affected products

• Contribsys Sidekiq: up to and including 5.1.3; from 6.0.0, up to and including 6.2.0
• Debian Debian Linux: version 9.0 only

Published 2021-04-06. Last modified 2026-06-17.