Radiant CMS part_body_content parameter cross-site scripting vulnerability

Radiant CMS is a free and open source content management system designed for small teams. A cross-site scripting vulnerability exists in Radiant CMS version 1.1.4. A remote attack can be exploited to inject arbitrary web script or HTML by sending the 'partbodycontent' parameter with specially...

CVE-2018-5216

Radiant CMS 1.1.4 has XSS via crafted Markdown input in the partbodycontent parameter to an admin/pages//edit resource...

CVE-2018-5216

Radiant CMS 1.1.4 has XSS via crafted Markdown input in the partbodycontent parameter to an admin/pages//edit resource...

CVE-2018-5216: Improper Neutralization of Input During Web Page Generation

Radiant CMS 1.1.4 has XSS via crafted Markdown input in the partbodycontent parameter to an admin/pages//edit resource...

CVE-2012-1498: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via an add action to admin/users/add or 2 modify a web page via a save action to...