Online News site security vulnerabilities

Online News site is an online news site by the individual developer Mobina Jafarian. A security vulnerability exists in Online News site version v1.0, which stems from vulnerability to cross-site scripting XSS attacks and allows an attacker to execute arbitrary code via the title and summary fiel...

CVE-2024-45933: Improper Control of Generation of Code

OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting XSS which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint...

PT-2024-31851

Name of the Vulnerable Software and Affected Versions OnlineNewsSite version 1.0 Description The issue allows attackers to execute arbitrary code via the Title and summary fields in the "/admin/post/edit/" endpoint. This enables attackers to run any code they want. Recommendations For...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-17188)

MiniCMS is a micro content management system designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS 1.10. An attacker can exploit this vulnerability by using the mc-admin/post-edit.php tags parameter to conduct cross-site scripting attacks...