CVE-2021-45787

maccms

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-45787

Katalog CVE

CVSS 5.4 · Medium EPSS 0,46%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada maccms. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks.

Rincian

Terbit di NVD
16 Maret 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,46% peluang dieksploitasi; lebih tinggi dari 38,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
maccms maccms Versi 10.0
maccms maccms Versi 10.0 2018.03.15
maccms maccms Versi 10.0 2018.03.21
maccms maccms Versi 10.0 2018.04.02
maccms maccms Versi 10.0 2018.05.01
maccms maccms Versi 10.0 2018.05.02.1005
maccms maccms Versi 10.0 2018.05.03.0000
maccms maccms Versi 10.0 2018.05.04.1320
maccms maccms Versi 10.0 2018.05.07.1213
maccms maccms Versi 10.0 2018.05.08.2020
maccms maccms Versi 10.0 2018.05.09.1320
maccms maccms Versi 10.0 2018.05.11.2300
maccms maccms Versi 10.0 2018.05.15.1403
maccms maccms Versi 10.0 2018.05.17.1050
maccms maccms Versi 10.0 2018.05.22.1338
maccms maccms Versi 10.0 2018.05.30.1007
maccms maccms Versi 10.0 2018.06.04.1510
maccms maccms Versi 10.0 2018.06.08.1339
maccms maccms Versi 10.0 2018.06.12.1430
maccms maccms Versi 10.0 2018.06.15.0910
maccms maccms Versi 10.0 2018.06.29.1425
maccms maccms Versi 10.0 2018.07.29.1010
maccms maccms Versi 10.0 2018.08.14.0955
maccms maccms Versi 10.0 2018.08.24.1355
maccms maccms Versi 10.0 2018.08.25.1120
maccms maccms Versi 10.0 2018.09.03.0920
maccms maccms Versi 10.0 2018.09.14.0850
maccms maccms Versi 10.0 2018.09.28.0950
maccms maccms Versi 10.0 2018.10.09.1333
maccms maccms Versi 10.0 2018.10.13.1025
maccms maccms Versi 10.0 2018.10.22.1200
maccms maccms Versi 10.0 2018.10.31.1340
maccms maccms Versi 10.0 2018.11.18.0920
maccms maccms Versi 10.0 2018.12.05.0950
maccms maccms Versi 10.0 2018.12.13.2151
maccms maccms Versi 10.0 2019.00.00.1001
maccms maccms Versi 10.0 2019.00.00.1002
maccms maccms Versi 10.0 2019.00.00.1003
maccms maccms Versi 10.0 2019.00.00.1004
maccms maccms Versi 10.0 2019.00.00.1005
maccms maccms Versi 10.0 2019.00.00.1006
maccms maccms Versi 10.0 2019.00.00.1007
maccms maccms Versi 10.0 2019.00.00.1008
maccms maccms Versi 10.0 2019.01.19.1001
maccms maccms Versi 10.0 2019.0101.1001
maccms maccms Versi 10.0 2019.02.23.0850
maccms maccms Versi 10.0 2019.03.06.1617
maccms maccms Versi 10.0 2019.1000.1009
maccms maccms Versi 10.0 2019.1000.1010
maccms maccms Versi 10.0 2019.1000.1011
maccms maccms Versi 10.0 2019.1000.1012
maccms maccms Versi 10.0 2019.1000.1013
maccms maccms Versi 10.0 2019.1000.1014
maccms maccms Versi 10.0 2019.1000.1015
maccms maccms Versi 10.0 2019.1000.1016
maccms maccms Versi 10.0 2019.1000.1017
maccms maccms Versi 10.0 2019.1000.1018
maccms maccms Versi 10.0 2020.1000.1019
maccms maccms Versi 10.0 2020.1000.1020
maccms maccms Versi 10.0 2020.1000.1021

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 90 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.