XSS Vulnerability in Composr CMS by ocProducts
CVE-2021-38709

6.1MEDIUM

Key Information:

Vendor

Compo

Status
Composr Cms
Vendor
CVE Published:
16 August 2021

What is CVE-2021-38709?

The vulnerability in Composr CMS, prior to version 10.0.38, allows attackers to exploit the staff_messaging system by injecting malicious JavaScript. This flaw poses a security risk, enabling potential data theft or manipulation by unauthorized users such as administrators and staff.

References

https://compo.sr/news/view/announcements/two-new-xss-secu...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.