An issue was discovered in COINS Construction Cloud 11.12
published April 14, 2022
CVSS
—
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is
An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00603 · 48.2th percentile
Published
2022-04-14T14:12Z
EPSS history
Timeline
14 APR 14:12Z
An issue was discovered in COINS Construction Cloud 11.12