AppCMS - Cross-Site Scripting

AppCMS 2.0.101 has a cross-site scripting vulnerability in \templates\m\inchead.php. id: CVE-2021-45380 info: name: AppCMS - Cross-Site Scripting author: pikpikcu severity: medium description: AppCMS 2.0.101 has a cross-site scripting vulnerability in \templates\m\inchead.php. impact: | Successfu...

CVE-2021-45380

creationtimestamp| type| source ---|---|--- 2022-01-23 20:16:03+00:00| seen| https://t.me/cibsecurity/36095 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-45380.yaml...

CVE-2021-45380

AppCMS 2.0.101 contains a Cross-Site Scripting (XSS) vulnerability in templates\m\inc_head.php. The issue is documented across multiple connected sources (Nuclei template CVE-2021-45380, CNVD/CNNVD entries) and is confirmed as a client-side script execution vector that could lead to session hijac...