CVE-2020-21387

A cross-site scripting XSS vulnerability in the parameter typeen of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload...

CVE-2020-21387

creationtimestamp| type| source ---|---|--- 2021-10-05 00:29:39+00:00| seen| https://t.me/cibsecurity/29936...

CVE-2020-21387

A cross-site scripting XSS vulnerability in the parameter typeen of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload...

CVE-2020-21387

CVE-2020-21387 is an XSS vulnerability in the parameter type_en of Maccms 10 (a PHP CMS for film/TV). The issue arises from inadequate handling of input in the type_en parameter, enabling an attacker to craft a payload that can steal the administrator cookie and escalate privileges. The linked do...