12 matches found
EUVD-2019-2447
Malware in sbrugna...
CVE-2019-10646
Wolf CMS v0.8.3.1 is affected by cross site scripting XSS in the module Add Snippet /?/admin/snippet/add. This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded...
CVE-2020-20391
Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...
CVE-2020-20391
Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...
CVE-2020-20391: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...
PT-2021-10487
Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: The issue is related to a Cross Site Scripting vulnerability. It affects the admin/snippets.php file via two specific actions: 1 Add Snippet and 2 Save snippets. Recommendations: For GetSimpleCMS versi...
Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2019-14101)
Wolf CMS is a PHP-based open source content management system CMS from the Wolf CMS team. The system provides a user interface , templates , user management and rights management and other functions . Add Snippet module is one of the modules used to add code snippets . A cross-site scripting...
CVE-2019-10646
Wolf CMS v0.8.3.1 is affected by cross site scripting XSS in the module Add Snippet /?/admin/snippet/add. This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded...
Cross site scripting
Wolf CMS v0.8.3.1 is affected by cross site scripting XSS in the module Add Snippet /?/admin/snippet/add. This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded...
CVE-2019-10646
CVE-2019-10646 affects Wolf CMS v0.8.3.1 with a reflected/stored XSS in the Add Snippet module (/?/admin/snippet/add). An attacker can inject arbitrary JavaScript as user input, which executes when the affected snippet loads. This vulnerability is confirmed by multiple sources in the connected do...
CVE-2019-10646: Improper Neutralization of Input During Web Page Generation
Wolf CMS v0.8.3.1 is affected by cross site scripting XSS in the module Add Snippet /?/admin/snippet/add. This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded...
PT-2019-11961
Name of the Vulnerable Software and Affected Versions Wolf CMS version 0.8.3.1 Description The issue allows an attacker to insert arbitrary JavaScript as user input in the "Add Snippet" module, which is accessible through the "/admin/snippet/add" API endpoint. This input will be executed whenever...