← voltar
CVE-2020-35275

CVE-2020-35275

EPSS 1.0%
Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://coastercms.comhttp://demo.coastercms.org/admin/homehttp://demo.coastercms.org/admin/loginhttp://demo.coastercms.org/homepage/bloghttps://www.exploit-db.com/exploits/49181