What’s Vulnerable › Vulnerabilities

CVE-2021-3780: Cross-site Scripting (XSS) - Stored in chocobozzz/peertube

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-15 · updated 2026-06-17
• Weakness: CWE-79

Description

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

• chocobozzz/peertube: before 3.4.0 — fixed in 3.4.0

How to fix

Upgrade to a fixed version: chocobozzz/peertube 3.4.0. Check the vendor advisory for mitigations.

References

• https://github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6
• https://huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65
• https://github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6
• https://huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65

Get alerted when CVE-2021-3780 or the next vulnerability affects your stack