CVE-2020-21357

A stored cross site scripting XSS vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field...

CVE-2020-21357: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field...

PT-2019-6066

Name of the Vulnerable Software and Affected Versions PopojiCMS version 1.2 Description The issue exists due to a lack of protection for the web page structure in the /admin.php?mod=user&act=addnew endpoint of the content management system. This allows a remote attacker to execute arbitrary web o...