CVE-2020-21082

CVE-2020-21082 is a cross-site scripting (XSS) vulnerability affecting Maccms 8.0, specifically within the background administrator article management module. Attackers can exploit this by injecting malicious payloads into the Chinese and English name text fields, potentially stealing administrator and user cookies. Rated 6.1 MEDIUM on the CVSS scale, it requires user interaction (UI:R) but can be exploited over the network (AV:N) with low attack complexity (AC:L), leading to low confidentiality and integrity impacts (C:L, I:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.