Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-25894

Description

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter.

POC

Reference

- https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/

Github

No PoCs found on GitHub currently.