A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21387
Reference (s):
- https://github.com/magicblack/maccms10/issues/126