CVE-2020-35275

MEDIO 5.4CVE-2020-35275 · Published 21/12/2020 · updated 09/07/2026

In breve

CVE-2020-35275 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda coastercms (coastercms).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 65.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
coastercms coastercms	`= 5.8.18`	No fix yet

Description

Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.

References

demo.coastercms.org/admin/home · Permissions Required
demo.coastercms.org/admin/login · Permissions Required
demo.coastercms.org/homepage/blog · Broken Link
exploit-db.com/exploits/49181 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free