CVE-2021-25977 — Piranha CMS - Stored XSS in Page Title
In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low pri…
Published: 2021-10-25 · CVSS: 5.4 · CVSS 3.1
In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7