Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-25977

Piranha CMS - Stored XSS in Page Title

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mend

Description

In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PiranhaCMS Piranha

  • 7.0.0 to < unspecifiedaffected
  • unspecified to ≤ 9.1.1affected

References