p PatchFirst

CVE-2021-44116

CVE-2021-44116

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.

CVSS 6.1 · Medium · EPSS 0.8%

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • anchorcms/anchor-cms Packagist

    Versions
    • 0.11
    • 0.12
    • 0.12.1
    • 0.12.3
    • 0.12.3a
    • 0.12.6
    • 0.12.7
    • 0.9
    • 0.9.1
    • 0.9.2
    • 0.9.3
    • 0.9.3-a
    • 0.9.3-b
    • 0.9.3.1-a
    Affected ranges
    • ECOSYSTEM: ≤ 0.12.7

    No fix published

Original sources

Check your server →