Cross-Site Scripting in ocProducts Composr CMS by ocProducts
CVE-2021-38708

5.4MEDIUM

Key Information:

Vendor

Compo

Status
Composr Cms
Vendor
CVE Published:
16 August 2021

What is CVE-2021-38708?

An XSS vulnerability exists in ocProducts Composr CMS versions before 10.0.38, allowing attackers to inject malicious JavaScript through Comcode content. This could lead to unauthorized actions being executed in the context of a victim's session, potentially compromising user data and security.

References

https://compo.sr/news/view/announcements/two-new-xss-secu...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.