← Database

CVE-2021-45018

MEDIUM CVSS: 6.1 Published: 2021-12-15 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.htmland then the .html file on the website that uses this editor (the file suffix is allowed).

Affected Platforms

Catfish-Cms Catfish Cms

Weakness Type

CWE-79

References