Skip to content
OpenAdvisories
Unscored CVE-2020-21387 EUVD-2020-14159GHSA-h27q-vg4q-q84x

A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and es…

Published Oct 4, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.

References