CVE-2020-21082

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p50

Published

Sep 14, 2021 (Sep 14, 2021)

Modified

Jun 17, 2026

Description

A cross-site scripting (XSS) vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names.

Vendors: maccms
Products: maccms
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.