Cross site scripting

2020-12-2115:15:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

69.9%

JSON

Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.

CPENameOperatorVersion
coastercmseq5.8.18

CPE	Name	Operator	Version
	coastercms	eq	5.8.18

References

coastercms.com

demo.coastercms.org/admin/home

demo.coastercms.org/admin/login

demo.coastercms.org/homepage/blog

www.exploit-db.com/exploits/49181

0.003 Low

EPSS

Percentile

69.9%

JSON

Related for PRION:CVE-2020-35275