9 matches found
CSZ-CMS-Stored-XSS---Site-Settings
CSZ CMS Stored XSS v1.3.0 Autore: Sergio Descrizione: La vulnerabilità di Cross Site Scripting in CSZCMS v.1.3.0 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nel parametro Additional Meta Tag nel menu Site Settings. Vettori di attacco:...
CVE-2023-41436-CSZ-CMS-Stored-XSS---Pages-Content
CSZ CMS XSS Memorizzato v1.3.0 Autore: Sergio CVE: 2023-41436 Descrizione: La vulnerabilità di Cross Site Scripting in CSZCMS v.1.3.0 consente a un utente malintenzionato locale di eseguire codice arbitrario tramite uno script appositamente predisposto nel parametro Additional Meta Tag nel...
CVE-2023-6303
A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the file /admin/settings/ of the component Site Settings Page. The manipulation of the argument Additional Meta Tag with the input leads to cross site scripting. It is possible to...
PT-2023-32603 · Csz Cms · Csz Cms
Name of the Vulnerable Software and Affected Versions: CSZCMS version 1.3.0 Description: A problematic issue has been found, affecting the Site Settings Page component, specifically the /admin/settings/ part of the file. The manipulation of the Additional Meta Tag argument with the input leads to...
CVE-2023-41436
Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...
CVE-2023-41436
Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...
CVE-2023-41436
Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...
CSZCMS Cross-Site Scripting Vulnerability
CSZCMS is an open source web application that allows managing all content and settings on a website. A security vulnerability exists in CSZCMS version v.1.3.0, which originates from a cross-site scripting vulnerability in the Additional Meta Tag parameter of the Pages Content Menu component...
CVE-2023-41436
Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Pages Content Menu component...