Medium severity6.1NVD Advisory· Published Aug 16, 2021· Updated Jun 17, 2026
CVE-2021-38709
CVE-2021-38709
Description
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <10.0.38
Patches
Vulnerability mechanics
References
1- compo.sr/news/view/announcements/two-new-xss-security.htmnvdVendor Advisory
News mentions
0No linked articles in our index yet.