In short
- CVE-2021-44116 is a MEDIUM (CVSS 6.1) vulnerability affecting anchorcms/anchor-cms, anchor cms (anchorcms).
- Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.7% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.
NVD description
Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.
More vulnerabilities in anchorcms/anchor-cms
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free