← volver
CVE-2020-35275

CVE-2020-35275

EPSS 1.0%
Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://coastercms.comhttp://demo.coastercms.org/admin/homehttp://demo.coastercms.org/admin/loginhttp://demo.coastercms.org/homepage/bloghttps://www.exploit-db.com/exploits/49181