Lucene search

K
osvGoogleOSV:GHSA-7MQ6-CP5M-F4J5
HistoryJan 05, 2022 - 2:54 p.m.

Cross-site Scripting in Anchor CMS

2022-01-0514:54:36
Google
osv.dev
9

0.001 Low

EPSS

Percentile

34.0%

Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.

0.001 Low

EPSS

Percentile

34.0%