← back
CVE-2020-35275

CVE-2020-35275

EPSS 1.0%
Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://coastercms.comhttp://demo.coastercms.org/admin/homehttp://demo.coastercms.org/admin/loginhttp://demo.coastercms.org/homepage/bloghttps://www.exploit-db.com/exploits/49181