PT-2021-10298

Name of the Vulnerable Software and Affected Versions: S-CMS versions 20191014 and earlier Description: The issue allows remote attackers to execute arbitrary code via the Site Title parameter of the component "/data/admin//app/config/". This enables attackers to perform Cross Site Scripting XSS...

CVE-2020-19158: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin//app/config/'...