{"id":"CVE-2021-44116","aliases":["GHSA-7mq6-cp5m-f4j5"],"url":"https://o3.security/vulnerability/CVE-2021-44116","summary":"Cross-site Scripting in Anchor CMS","details":"Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.","published":"2021-12-15T22:15:07.250Z","modified":"2026-07-09T05:14:32.086495Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"anchorcms/anchor-cms","fixedVersion":null}],"fix":null,"references":[{"type":"EVIDENCE","url":"https://www.cnblogs.com/unrealnumb/p/15573449.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T05:14:32.086495Z"}}