medium6.1Public exploit code
CVE-2021-30150
Composr 10.0.36 allows XSS in an XML script.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Composr CMS 10.0.36 - Cross Site Scripting2021-04-07 · webapps · php
Impact
Composr 10.0.36 allows XSS in an XML script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocproducts | Composr | Version 10.0.36 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/162111/Composr-CMS-10.0.36-Cross-Site-Scripting.html
- https://gitlab.com/composr-foundation/composr/commit/833a06466
- http://packetstormsecurity.com/files/162111/Composr-CMS-10.0.36-Cross-Site-Scripting.html
- https://gitlab.com/composr-foundation/composr/commit/833a06466