CVE-2020-35275

MEDIUM 5.4CVE-2020-35275 · Published 21/12/2020 · updated 09/07/2026

In short

CVE-2020-35275 is a MEDIUM (CVSS 5.4) vulnerability affecting coastercms (coastercms).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
coastercms coastercms	`= 5.8.18`	No fix yet

Description

Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.

References

demo.coastercms.org/admin/home · Permissions Required
demo.coastercms.org/admin/login · Permissions Required
demo.coastercms.org/homepage/blog · Broken Link
exploit-db.com/exploits/49181 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free