CVE-2021-27310

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter...

CVE-2021-27310

creationtimestamp| type| source ---|---|--- 2021-03-23 17:38:27+00:00| seen| Telegram/S3Mnuqg1rNC31upFTQy4biqsbH9p5KpuqCcVFKPk29c8EU...

CVE-2021-27310

Clansphere CMS 2011.4 is affected by an unauthenticated reflected XSS vulnerability in the language parameter. The Nuclei template confirms unauthenticated reflected XSS, with impact described as enabling arbitrary JavaScript execution in the victim’s browser (session hijacking/defacement as per ...