Lucene search
GoogleOSV:CVE-2021-25977HistoryOct 25, 2021 - 1:15 p.m.
CVE-2021-25977
2021-10-2513:15:07
Google
osv.dev
3
piranhacms
vulnerability
stored xss
page title
low privileged user
javascript execution
In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.
Related
cvelist
cvelist
CVE-2021-25977 Piranha CMS - Stored XSS in Page Title
2021-10-25 13:10:10
cnvd
cnvd
PiranhaCMS Cross-Site Scripting Vulnerability
2021-10-28 00:00:00
osv
osv
Cross-site Scripting in PiranhaCMS
2021-10-27 18:53:03
cve
cve
CVE-2021-25977
2021-10-25 13:15:07
nvd
nvd
CVE-2021-25977
2021-10-25 13:15:07
prion
prion
Design/Logic Flaw
2021-10-25 13:15:00
github
github
Cross-site Scripting in PiranhaCMS
2021-10-27 18:53:03