CVE-2021-45787: XSS
Published Mar 16, 2022
·Updated
There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks.
Affected Software
90 affected components
maccms Maccms=10.0
maccms Maccms=10.0-2018.03.15
maccms Maccms=10.0-2018.03.21
maccms Maccms=10.0-2018.04.02
maccms Maccms=10.0-2018.05.01
maccms Maccms=10.0-2018.05.02.1005
maccms Maccms=10.0-2018.05.03.0000
maccms Maccms=10.0-2018.05.04.1320
maccms Maccms=10.0-2018.05.07.1213
maccms Maccms=10.0-2018.05.08.2020
maccms Maccms=10.0-2018.05.09.1320
maccms Maccms=10.0-2018.05.11.2300
maccms Maccms=10.0-2018.05.15.1403
maccms Maccms=10.0-2018.05.17.1050
maccms Maccms=10.0-2018.05.22.1338
maccms Maccms=10.0-2018.05.30.1007
maccms Maccms=10.0-2018.06.04.1510
maccms Maccms=10.0-2018.06.08.1339
maccms Maccms=10.0-2018.06.12.1430
maccms Maccms=10.0-2018.06.15.0910
maccms Maccms=10.0-2018.06.29.1425
maccms Maccms=10.0-2018.07.29.1010
maccms Maccms=10.0-2018.08.14.0955
maccms Maccms=10.0-2018.08.24.1355
maccms Maccms=10.0-2018.08.25.1120
maccms Maccms=10.0-2018.09.03.0920
maccms Maccms=10.0-2018.09.14.0850
maccms Maccms=10.0-2018.09.28.0950
maccms Maccms=10.0-2018.10.09.1333
maccms Maccms=10.0-2018.10.13.1025
maccms Maccms=10.0-2018.10.22.1200
maccms Maccms=10.0-2018.10.31.1340
maccms Maccms=10.0-2018.11.18.0920
maccms Maccms=10.0-2018.12.05.0950
maccms Maccms=10.0-2018.12.13.2151
maccms Maccms=10.0-2019.00.00.1001
maccms Maccms=10.0-2019.00.00.1002
maccms Maccms=10.0-2019.00.00.1003
maccms Maccms=10.0-2019.00.00.1004
maccms Maccms=10.0-2019.00.00.1005
maccms Maccms=10.0-2019.00.00.1006
maccms Maccms=10.0-2019.00.00.1007
maccms Maccms=10.0-2019.00.00.1008
maccms Maccms=10.0-2019.01.19.1001
maccms Maccms=10.0-2019.0101.1001
maccms Maccms=10.0-2019.02.23.0850
maccms Maccms=10.0-2019.03.06.1617
maccms Maccms=10.0-2019.1000.1009
maccms Maccms=10.0-2019.1000.1010
maccms Maccms=10.0-2019.1000.1011
maccms Maccms=10.0-2019.1000.1012
maccms Maccms=10.0-2019.1000.1013
maccms Maccms=10.0-2019.1000.1014
maccms Maccms=10.0-2019.1000.1015
maccms Maccms=10.0-2019.1000.1016
maccms Maccms=10.0-2019.1000.1017
maccms Maccms=10.0-2019.1000.1018
maccms Maccms=10.0-2020.1000.1019
maccms Maccms=10.0-2020.1000.1020
maccms Maccms=10.0-2020.1000.1021
maccms Maccms=10.0-2020.1000.1022
maccms Maccms=10.0-2020.1000.1023
maccms Maccms=10.0-2020.1000.1024
maccms Maccms=10.0-2020.1000.1025
maccms Maccms=10.0-2020.1000.1027
maccms Maccms=10.0-2020.1000.1029
maccms Maccms=10.0-2020.1000.1031
maccms Maccms=10.0-2020.1000.1032
maccms Maccms=10.0-2020.1000.1033
maccms Maccms=10.0-2020.1000.1034
maccms Maccms=10.0-2020.1000.1035
maccms Maccms=10.0-2020.1000.1039
maccms Maccms=10.0-2020.1000.1042
maccms Maccms=10.0-2020.1000.1051
maccms Maccms=10.0-2020.1000.1060
maccms Maccms=10.0-2020.1000.1062
maccms Maccms=10.0-2020.1000.1068
maccms Maccms=10.0-2020.1000.1068b
maccms Maccms=10.0-2020.1000.1069
maccms Maccms=10.0-2020.1000.1074
maccms Maccms=10.0-2020.1000.1075
maccms Maccms=10.0-2020.1000.1080
maccms Maccms=10.0-2020.1000.1081
maccms Maccms=10.0-2021.1000.1081
maccms Maccms=10.0-2022.1000.1099
maccms Maccms=10.0-2022.1000.3001
maccms Maccms=10.0-2022.1000.3002
maccms Maccms=10.0-2022.1000.3004
maccms Maccms=10.0-2022.1000.3005
maccms Maccms=10.0-2022.1000.3025
Remediation
Patch Available
Event History
Mar 16, 2022
CVE Published
via MITRE·12:38 PM
Data Sourced
via MITRE·12:38 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-45787?
The severity of CVE-2021-45787 is classified as medium due to its potential to allow stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2021-45787?
To fix CVE-2021-45787, update maccms to the latest version which addresses this stored XSS vulnerability.
3
What are the affected versions for CVE-2021-45787?
CVE-2021-45787 affects maccms versions 10.0 and its various patches leading up to 2022.
4
How does CVE-2021-45787 impact users?
CVE-2021-45787 allows attackers to insert malicious scripts into content viewed by other users, potentially compromising user data.
5
What type of vulnerability is CVE-2021-45787?
CVE-2021-45787 is a stored Cross Site Scripting (XSS) vulnerability.