CVE-2021-45224

An issue was discovered in COINS Construction Cloud 11.12

published January 24, 2022

CVSS
—
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a URL parameter. Attackers can trivially alter this code to cause malicious behaviour. The application is therefore vulnerable to reflected XSS via malicious URLs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01085 · 65.0th percentile
Published
2022-01-24T19:58Z
EPSS history
Timeline
  • 24 JAN 19:58Z
    An issue was discovered in COINS Construction Cloud 11.12
    cvelistv5