CVE-2017-1000213

WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=usersearch...

PT-2017-10911

Name of the Vulnerable Software and Affected Versions WBCE version 1.1.11 Description The issue allows for reflected XSS attacks via the begriff POST parameter in the "/admin/admintools/tool.php?tool=user search" API endpoint. Recommendations For WBCE version 1.1.11, as a temporary workaround,...

CVE-2014-9243: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to wb/admin/admintools/tool.php or 2 sectionid parameter to editmodulefiles.php, 3 news/addpost.php, 4 news/modifygroup.php, 5...

PT-2014-8898

Name of the Vulnerable Software and Affected Versions WebsiteBaker version 2.8.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the QUERY STRING to "wb/admin/admintools/tool.php" or the section id parameter to several files in the...