Lucene search
+L

10 matches found

Vulnrichment
Vulnrichment
•added 2026/05/16 3:25 p.m.•17 views

CVE-2020-37237 Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners

Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner management interface. Attackers with admin credentials can inject XSS payloads in the Description field of the Add banner...

6.4CVSS5.8AI score0.00239EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/16 12:00 a.m.•26 views

PT-2026-41437

Name of the Vulnerable Software and Affected Versions Composr CMS version 10.0.34 Description Authenticated administrators can perform a persistent cross-site scripting attack via the banner management interface. By injecting malicious scripts into the Description field of the Add banner...

6.4CVSS5.6AI score0.00239EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/05/06 3:32 p.m.•20 views

EUVD-2026-27826

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.2AI score0.00344EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/06 2:16 p.m.•22 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS0.00344EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/06 12:00 a.m.•10 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

6.2AI score0.00344EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/06 12:00 a.m.•40 views

CVE-2026-36358

Juzaweb CMS v.5.0.0 is affected by a Cross-Site Scripting (XSS) vulnerability within the Add Banner Ads function. The root cause is the improper neutralization of input during web page generation, which allows a remote attacker to execute arbitrary code via a crafted script. While the description...

5.4CVSS6.2AI score0.00344EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•18 views

Juzaweb CMS 跨站脚本漏洞

Juzaweb CMS is a content management system developed by Juzaweb’s individual developers, based on the Laravel framework and web platform. Version 5.0.0 of Juzaweb CMS has a cross-site scripting vulnerability. This vulnerability stems from the Add Banner Ads feature, which contains cross-site...

5.4CVSS5.8AI score0.00344EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•2 views

CVE-2026-36358: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.5AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•24 views

PT-2026-37629

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.2AI score0.00344EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/06 12:00 a.m.•11 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.2AI score0.00344EPSS
SaveExploits0References4
Rows per page
Query Builder