Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25064
HistoryApr 24, 2020 - 4:17 a.m.

Cross-Site Scripting (XSS)

2020-04-2404:17:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

24.8%

anchorcms/anchor-cms is vulnerable to cross-site scripting (XSS). A user with a privilege to login as administrator is allowed to post arbitrary script via the post creation feature which will execute in a user’s browser when visited.

CPENameOperatorVersion
anchorcms/anchor-cmsle0.12.7

0.001 Low

EPSS

Percentile

24.8%

Related for VERACODE:25064