PT-2021-10275

Name of the Vulnerable Software and Affected Versions: S-CMS version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the component "/admin/tpl.php?page=". This is a Cross Site Scripting XSS issue. Recommendations: For S-CMS version 1.0, consider restricting access...

CVE-2020-19046: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...