CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

CVE-2021-44116 (Anchor CMS) : The vulnerability is an XSS in Anchor CMS versions ≤ 0.12.7, residing in posts.php. The root cause is improper sanitization/neutralization of input in the posts column, allowing an attacker to inject malicious code via the title/content fields. This can enable an att...