PT-2024-28366

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/keyWord deal.php with parameters mudi=del, dataType=word, and dataTypeCN. This issue allows for unauthorized requests. Recommendatio...

PT-2018-18752

Name of the Vulnerable Software and Affected Versions OTCMS version 3.20 Description The issue allows for XSS by adding a keyword or link to an article. This can be demonstrated through a request to the "admin/keyWord deal.php?mudi=add" endpoint. Recommendations For OTCMS version 3.20, consider...