CVE-2021-33040: Futurepress Epub.js

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS.

Affected products

• Futurepress Epub.js: before 0.3.89 (fixed in 0.3.89)

Published 2022-01-17. Last modified 2026-06-17.