CVE-2021-41563: Tad BOOK3 Project Tad BOOK3

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

Affected products

• Tad BOOK3 Project Tad BOOK3: before 3.9 (fixed in 3.9)

Published 2021-10-08. Last modified 2026-06-17.