medium5.4
CVE-2021-45228
An XSS issue was discovered in COINS Construction Cloud 11.12.
Impact
An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coins-Global | Coins Construction Cloud | Version 11.12 |
Weakness classification
References
- NVD record
- CVE.org record
- https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-031.txt
- https://appsource.microsoft.com/en-us/product/web-apps/constructionindustrysolutionslimited-5057232.coinsconstructioncloud?tab=overview
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-031.txt