CVE-2021-45787

magicblack/maccms10

on github

Published

March 16, 2022

Severity

CVSS v3:

5.4 MEDIUM

CVSS v2:

3.5 LOW

Description

There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks.

References

https://github.com/magicblack/maccms10/issues/746

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3025::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3005::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3004::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3002::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3001::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2022.1000.1099::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2021.1000.1081::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1068b::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1081::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:-::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.07.1213::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.08.2020::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.09.1320::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.11.2300::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.15.1403::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.17.1050::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.22.1338::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.30.1007::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.06.04.1510::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1035::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1042::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1062::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1068::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1069::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1074::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1075::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1080::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.03.15::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.03.21::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.04.02::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.01::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.02.1005::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.03.0000::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.05.04.1320::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1006::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1007::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1008::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1009::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1010::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1011::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1012::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1013::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1014::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1015::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1016::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1017::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.1000.1018::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1019::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1020::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1021::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1022::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1023::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1024::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1025::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1027::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1029::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1031::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1032::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1033::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1034::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1039::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1051::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2020.1000.1060::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.06.08.1339::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.06.12.1430::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.06.15.0910::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.06.29.1425::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.07.29.1010::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.08.14.0955::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.08.24.1355::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.08.25.1120::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.09.03.0920::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.09.14.0850::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.09.28.0950::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.10.09.1333::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.10.13.1025::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.10.22.1200::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.10.31.1340::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.11.18.0920::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.12.05.0950::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2018.12.13.2151::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1001::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1002::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1003::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1004::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.00.00.1005::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.01.19.1001::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.0101.1001::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.02.23.0850::::::	n/a	n/a	10.0
cpe:2.3:a:maccms:maccms:10.0:2019.03.06.1617::::::	n/a	n/a	10.0

External Links

NVD - CVE-2021-45787