CVE-2021-45228

An XSS issue was discovered in COINS Construction Cloud 11.12

published April 14, 2022

CVSS
—
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00603 · 48.2th percentile
Published
2022-04-14T14:00Z
EPSS history
Timeline
  • 14 APR 14:00Z
    An XSS issue was discovered in COINS Construction Cloud 11.12
    cvelistv5