CVE-2021-43635: Codexnotes Codex

Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days.

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.

Affected products

• Codexnotes Codex: before 1.4.0 (fixed in 1.4.0)

Published 2022-02-04. Last modified 2026-06-17.