CVE-2021-45227: Coins-Global Coins Construction Cloud

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack.

Affected products

• Coins-Global Coins Construction Cloud: version 11.12 only

Published 2022-04-14. Last modified 2026-06-17.