CVE-2021-45228: Coins-Global Coins Construction Cloud

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.

Affected products

Published 2022-04-14. Last modified 2026-06-17.