Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-45787
HistoryMar 16, 2022 - 1:15 p.m.

CVE-2021-45787

2022-03-1613:15:08
CWE-79
[email protected]
web.nvd.nist.gov
59
cve-2021-45787
stored xss
maccms v10
video
parameter
security
vulnerability
nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

24.7%

JSON

There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks.

Affected configurations

NVD
Node
maccmsmaccmsMatch10.0-
OR
maccmsmaccmsMatch10.02018.03.15
OR
maccmsmaccmsMatch10.02018.03.21
OR
maccmsmaccmsMatch10.02018.04.02
OR
maccmsmaccmsMatch10.02018.05.01
OR
maccmsmaccmsMatch10.02018.05.02.1005
OR
maccmsmaccmsMatch10.02018.05.03.0000
OR
maccmsmaccmsMatch10.02018.05.04.1320
OR
maccmsmaccmsMatch10.02018.05.07.1213
OR
maccmsmaccmsMatch10.02018.05.08.2020
OR
maccmsmaccmsMatch10.02018.05.09.1320
OR
maccmsmaccmsMatch10.02018.05.11.2300
OR
maccmsmaccmsMatch10.02018.05.15.1403
OR
maccmsmaccmsMatch10.02018.05.17.1050
OR
maccmsmaccmsMatch10.02018.05.22.1338
OR
maccmsmaccmsMatch10.02018.05.30.1007
OR
maccmsmaccmsMatch10.02018.06.04.1510
OR
maccmsmaccmsMatch10.02018.06.08.1339
OR
maccmsmaccmsMatch10.02018.06.12.1430
OR
maccmsmaccmsMatch10.02018.06.15.0910
OR
maccmsmaccmsMatch10.02018.06.29.1425
OR
maccmsmaccmsMatch10.02018.07.29.1010
OR
maccmsmaccmsMatch10.02018.08.14.0955
OR
maccmsmaccmsMatch10.02018.08.24.1355
OR
maccmsmaccmsMatch10.02018.08.25.1120
OR
maccmsmaccmsMatch10.02018.09.03.0920
OR
maccmsmaccmsMatch10.02018.09.14.0850
OR
maccmsmaccmsMatch10.02018.09.28.0950
OR
maccmsmaccmsMatch10.02018.10.09.1333
OR
maccmsmaccmsMatch10.02018.10.13.1025
OR
maccmsmaccmsMatch10.02018.10.22.1200
OR
maccmsmaccmsMatch10.02018.10.31.1340
OR
maccmsmaccmsMatch10.02018.11.18.0920
OR
maccmsmaccmsMatch10.02018.12.05.0950
OR
maccmsmaccmsMatch10.02018.12.13.2151
OR
maccmsmaccmsMatch10.02019.00.00.1001
OR
maccmsmaccmsMatch10.02019.00.00.1002
OR
maccmsmaccmsMatch10.02019.00.00.1003
OR
maccmsmaccmsMatch10.02019.00.00.1004
OR
maccmsmaccmsMatch10.02019.00.00.1005
OR
maccmsmaccmsMatch10.02019.00.00.1006
OR
maccmsmaccmsMatch10.02019.00.00.1007
OR
maccmsmaccmsMatch10.02019.00.00.1008
OR
maccmsmaccmsMatch10.02019.01.19.1001
OR
maccmsmaccmsMatch10.02019.0101.1001
OR
maccmsmaccmsMatch10.02019.02.23.0850
OR
maccmsmaccmsMatch10.02019.03.06.1617
OR
maccmsmaccmsMatch10.02019.1000.1009
OR
maccmsmaccmsMatch10.02019.1000.1010
OR
maccmsmaccmsMatch10.02019.1000.1011
OR
maccmsmaccmsMatch10.02019.1000.1012
OR
maccmsmaccmsMatch10.02019.1000.1013
OR
maccmsmaccmsMatch10.02019.1000.1014
OR
maccmsmaccmsMatch10.02019.1000.1015
OR
maccmsmaccmsMatch10.02019.1000.1016
OR
maccmsmaccmsMatch10.02019.1000.1017
OR
maccmsmaccmsMatch10.02019.1000.1018
OR
maccmsmaccmsMatch10.02020.1000.1019
OR
maccmsmaccmsMatch10.02020.1000.1020
OR
maccmsmaccmsMatch10.02020.1000.1021
OR
maccmsmaccmsMatch10.02020.1000.1022
OR
maccmsmaccmsMatch10.02020.1000.1023
OR
maccmsmaccmsMatch10.02020.1000.1024
OR
maccmsmaccmsMatch10.02020.1000.1025
OR
maccmsmaccmsMatch10.02020.1000.1027
OR
maccmsmaccmsMatch10.02020.1000.1029
OR
maccmsmaccmsMatch10.02020.1000.1031
OR
maccmsmaccmsMatch10.02020.1000.1032
OR
maccmsmaccmsMatch10.02020.1000.1033
OR
maccmsmaccmsMatch10.02020.1000.1034
OR
maccmsmaccmsMatch10.02020.1000.1035
OR
maccmsmaccmsMatch10.02020.1000.1039
OR
maccmsmaccmsMatch10.02020.1000.1042
OR
maccmsmaccmsMatch10.02020.1000.1051
OR
maccmsmaccmsMatch10.02020.1000.1060
OR
maccmsmaccmsMatch10.02020.1000.1062
OR
maccmsmaccmsMatch10.02020.1000.1068
OR
maccmsmaccmsMatch10.02020.1000.1068b
OR
maccmsmaccmsMatch10.02020.1000.1069
OR
maccmsmaccmsMatch10.02020.1000.1074
OR
maccmsmaccmsMatch10.02020.1000.1075
OR
maccmsmaccmsMatch10.02020.1000.1080
OR
maccmsmaccmsMatch10.02020.1000.1081
OR
maccmsmaccmsMatch10.02021.1000.1081
OR
maccmsmaccmsMatch10.02022.1000.1099
OR
maccmsmaccmsMatch10.02022.1000.3001
OR
maccmsmaccmsMatch10.02022.1000.3002
OR
maccmsmaccmsMatch10.02022.1000.3004
OR
maccmsmaccmsMatch10.02022.1000.3005
OR
maccmsmaccmsMatch10.02022.1000.3025
CPENameOperatorVersion
maccms:maccmsmaccmseq10.0

Related

prion 1
cvelist 1
cnvd 1
nvd 1
prion
prion
Cross site scripting
2022-03-16 13:15:00
cvelist
cvelist
CVE-2021-45787
2022-03-16 12:38:41
cnvd
cnvd
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-21811)
2022-03-18 00:00:00
nvd
nvd
CVE-2021-45787
2022-03-16 13:15:08

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

24.7%

JSON
Related for CVE-2021-45787
prion1cvelist1cnvd1nvd1