CVE-2021-45227

Published: 2022-04-14T15:15Z

Last Modified: 2024-11-21T06:32Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt