CVE-2020-35275

Description

Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to any malicious website because it is trigged on the main home page of the product/application.

References

https://www.exploit-db.com/exploits/49181

http://demo.coastercms.org/homepage/blog

http://demo.coastercms.org/admin/login

http://demo.coastercms.org/admin/home

http://coastercms.com

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS