CVE-2021-45225: Coins-Global Coins Construction Cloud

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site scripting (XSS) via malicious links (affecting the search window and activity view window).

Affected products

• Coins-Global Coins Construction Cloud: version 11.12 only

Published 2022-01-24. Last modified 2026-06-17.