CVE-2021-25894

Publication date

2021-04-02 11:31:15

Family

mitre

State

PUBLISHED

Description

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter.