medium5.4
CVE-2020-35275
Coastercms v5.8.18 is affected by cross-site Scripting (XSS).
Impact
Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coastercms | Coastercms | Version 5.8.18 |
Weakness classification
References
- NVD record
- CVE.org record
- http://demo.coastercms.org/admin/home
- http://demo.coastercms.org/admin/login
- http://demo.coastercms.org/homepage/blog
- https://www.exploit-db.com/exploits/49181
- http://demo.coastercms.org/admin/home
- http://demo.coastercms.org/admin/login
- http://demo.coastercms.org/homepage/blog
- https://www.exploit-db.com/exploits/49181