CVEs-PoC/2021/CVE-2021-27309.md

CVE-2021-27309

Description

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.

POC

Reference

• https://github.com/xoffense/POC/blob/main/Clansphere%202011.4%20%22module%22%20xss.md
• https://github.com/xoffense/POC/blob/main/Clansphere%202011.4%20%22module%22%20xss.md

Github

• https://github.com/ARPSyndicate/kenzer-templates