Skip to content
Threat Feed
Subscribe

Product

VaahCMS (2.0.0-2.3.4)

1 brief RSS
high advisory

VaahCMS OTP Template Cross-Site Scripting and Code Execution

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload in OTP email templates that executes unauthorized code in victim browsers, enabling credential theft and DOM manipulation.

VaahCMS xss credential-theft web-security
3t 1c