CVE-2021-47972
Sticky Notes & Color Widgets 1.4.2 Denial of Service
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.
| CWE | CWE-789 |
| Vendor | sticky-notes-color-widgets |
| Product | sticky notes color widgets |
| Published | May 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for sticky-notes-color-widgets sticky notes color widgets
Be the first to know when new high vulnerabilities affecting sticky-notes-color-widgets sticky notes color widgets are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
sticky-notes-color-widgets / Sticky Notes Color Widgets
1.4.2
References
Credits
Geovanni Ruiz