CVE-2021-23411

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the main functionality. It accepts input that can result in the output (an anchor a tag) containing undesirable Javascript code that can be executed upon user interaction.

• CWE-79

• https://github.com/alexcorvi/anchorme.js/blob/gh-pages/src/transform.ts%23L81Broken Link
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1320695Exploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-ANCHORME-1311008Exploit, Third Party Advisory
• https://github.com/alexcorvi/anchorme.js/blob/gh-pages/src/transform.ts%23L81Broken Link
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1320695Exploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-ANCHORME-1311008Exploit, Third Party Advisory

Published

Jul 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23406This affects the package pac-resolver before 5.0.0. This can…9.8
• CVE-2021-23407This affects the package elFinder.Net.Core from 0 and before…7.5
• CVE-2021-23408This affects the package com.graphhopper:graphhopper-web-bun…4.3
• CVE-2021-23409The package github.com/pires/go-proxyproto before 0.6.0 are …7.5
• CVE-2021-2341Vulnerability in the Java SE, Oracle GraalVM Enterprise Edit…3.1
• CVE-2021-23410Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-23412All versions of package gitlogplus are vulnerable to Command…9.8
• CVE-2021-23413This affects the package jszip before 3.7.0. Crafting a new …5.3
• CVE-2021-23414This affects the package video.js before 7.14.3. The src att…6.1
• CVE-2021-23415This affects the package elFinder.AspNet before 1.1.1. The u…7.5
• CVE-2021-23416This affects all versions of package curly-bracket-parser. W…6.1
• CVE-2021-23417All versions of package deepmergefn are vulnerable to Protot…9.8