medium6.1
CVE-2020-21387
A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges vi…
Impact
A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maccms | Maccms | Version 10.0 |