|
|
CompactCMS Multiple Cross Site Scripting Vulnerabilities
CompactCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied script code may be executed in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials. CompactCMS 1.4.1 is vulnerable; other versions may also be affected. |
|
Privacy Statement |