Skip to content
Threat Feed
Subscribe

Vendor

VaahCMS

1 brief RSS
high advisory

VaahCMS OTP Template Cross-Site Scripting and Code Execution

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload in OTP email templates that executes unauthorized code in victim browsers, enabling credential theft and DOM manipulation.

VaahCMS xss credential-theft web-security
3t 1c