CVE-2021-45786

Name of the Vulnerable Software and Affected Versions maccms version 10

Description The issue allows an attacker to gain privileges by logging in through the /index.php/user/login endpoint, specifically by exploiting the col and openid parameters.

Recommendations For maccms version 10, consider restricting access to the /index.php/user/login endpoint until a fix is available, and avoid using the col and openid parameters in this endpoint to minimize the risk of exploitation.