CVE-2021-26035

CVE-2021-26035 affects Joomla! 3.0.0–3.9.27, due to inadequate escaping in the JForm API rules field, enabling Cross‑Site Scripting (XSS). The issue is documented with CVSS v3.1 base score 6.1 (MEDIUM) and CVSS v2 base score 4.3 (MEDIUM). Nessus and other sources corroborate the XSS vulnerability...

CVE-2020-26035

Zammad CVE-2020-26035 affects versions before 3.4.1 (Zammad

Nucleus CMS 3.0.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26035/info Nucleus CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...