CVE-2021-45018
15.12.2021, 23:15
Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.htmland then the .html file on the website that uses this editor (the file suffix is allowed).
| Vendor | Product | Version |
|---|---|---|
| catfish-cms | catfish_cms | 𝑥 ≤ 6.3.0 |
𝑥
= Vulnerable software versions