Vulnerability · Published Apr 2, 2021 · Assigned by mitre
CVE-2021-25893
Medium 5.4
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS NVD)5.4Medium
Exploit odds (30 days)0.9%top 40.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/.
Affected products (as reported)
References
- https://www.magnolia-cms.com x_refsource_MISC
- https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/ x_refsource_MISC
- https://docs.magnolia-cms.com/product-docs/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#ReleasenotesforMagnoliaCMS6.2.4-Notablebugfixes x_refsource_MISC