Security Advisory

CVE-2021-45228

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-14 14:00:53
Last updated 2024-08-04 04:39:20
Assigner mitre
State PUBLISHED

Description

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.