PT-2022-11889 · Maccms · Maccms

Inkqaq · Published 2022-03-31 · Updated 2022-04-06 · CVE-2021-43707

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Maccms version 10

Description A Cross Site Scripting (XSS) issue exists due to the link Name parameter. This allows for potential malicious script execution.

Recommendations For Maccms version 10, avoid using the link Name parameter until a fix is available. As a temporary workaround, consider restricting access to the affected parameter to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-43707

Affected Products

Maccms

References · 5

• 🔥 https://github.com/maccmspro/maccms10/issues/18 · Exploit
• https://osv.dev/vulnerability/CVE-2021-43707 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43707 · Security Note
• https://t.me/cibsecurity/39940 · Telegram Post
• https://t.me/cvenotify/28233 · Telegram Post