CVE-2021-44116

6.1 mediumEPSS 0.8%

Medium (6.1) in anchorcms anchor cms. EPSS 0.8% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

anchorcms:anchor_cms

References

https://www.cnblogs.com/unrealnumb/p/15573449.html
https://www.cnblogs.com/unrealnumb/p/15573449.html

Check your stack JSON