CVE-2021-45018

Publication date

2021-12-15 22:24:42

Family

mitre

State

PUBLISHED

Description

Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.htmland then the .html file on the website that uses this editor (the file suffix is allowed).