CVE-2020-21434

Name of the Vulnerable Software and Affected Versions: Maccms version 10

Description: The issue is related to a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability can be exploited via a crafted payload in the nickname text field.

Recommendations: For Maccms version 10, consider restricting input in the nickname text field to prevent the injection of malicious scripts until a fix is available. As a temporary workaround, disabling the Editing function under the Member module can help minimize the risk of exploitation.