cve/2021/CVE-2021-3355.md

CVE-2021-3355

Description

A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.

POC

Reference

• http://packetstormsecurity.com/files/161562/LightCMS-1.3.4-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/49598

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/EdgeSecurityTeam/Vulnerability
• https://github.com/tzwlhack/Vulnerability