Lucene search
GoogleOSV:GHSA-JVJP-VH27-R9H5HistoryOct 27, 2021 - 6:53 p.m.
Cross-site Scripting in PiranhaCMS
2021-10-2718:53:03
Google
osv.dev
6
piranhacms
cross-site scripting
stored xss
vulnerability
javascript execution
EPSS
0.001
Percentile
19.5%
In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.
Related
cvelist
cvelist
CVE-2021-25977 Piranha CMS - Stored XSS in Page Title
2021-10-25 13:10:10
cnvd
cnvd
PiranhaCMS Cross-Site Scripting Vulnerability
2021-10-28 00:00:00
osv
osv
CVE-2021-25977
2021-10-25 13:15:07
cve
cve
CVE-2021-25977
2021-10-25 13:15:07
nvd
nvd
CVE-2021-25977
2021-10-25 13:15:07
prion
prion
Design/Logic Flaw
2021-10-25 13:15:00
github
github
Cross-site Scripting in PiranhaCMS
2021-10-27 18:53:03