CVE-2018-20971

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

Cross site request forgery (csrf)

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

CVE-2018-20971

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

CVE-2018-18824

WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/filemanager/browse/...

PT-2019-9643

Name of the Vulnerable Software and Affected Versions WolfCMS version 0.8.3.1 Description The issue allows for XSS via an SVG file. This can be exploited by accessing the /admin/plugin/file manager/browse/ API endpoint. Recommendations For WolfCMS version 0.8.3.1, consider restricting access to t...

PT-2019-9642

Name of the Vulnerable Software and Affected Versions WolfCMS version 0.8.3.1 Description The issue allows for XSS via an SVG file. This can be achieved by accessing the /admin/plugin/file manager/browse/ API endpoint. Recommendations For WolfCMS version 0.8.3.1, update to a newer version that...

CVE-2018-18824: Improper Neutralization of Input During Web Page Generation

WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/filemanager/browse/...

PT-2019-10221

Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue allows for XSS by creating a new file containing a crafted attribute of an IMG element, specifically targeting the "admin/?/plugin/file manager" endpoint. Recommendations: For Frog CMS version...

CVE-2018-20775: Improper Control of Generation of Code

admin/?/plugin/filemanager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI...

WordPress Absolutely Glamorous Custom Admin Plugin <= 6.4.1 Database Backup Arbitrary File Download Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112439";...

PT-2018-13528

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue is related to stored XSS. It can be exploited via the "/admin/?/plugin/comment/settings" API endpoint. Recommendations For Frog CMS version 0.9.5, update to a version that contains a fix for this...

PT-2018-13527

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue allows creation of files via the "/admin/?/plugin/file manager/save" API endpoint. Recommendations For Frog CMS version 0.9.5, consider disabling the file manager plugin until a patch is available...

CVE-2018-16374: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16373: Unrestricted Upload of File with Dangerous Type

Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/filemanager/save...

CVE-2018-11098

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...

Frog CMS File Upload Vulnerability

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A security vulnerability exists in Frog CMS version 0.9.5. An attacker can exploit the vulnerability wit...

PT-2018-10308

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description An issue was discovered in Frog CMS, where there is a file upload vulnerability via the "admin/?/plugin/file manager/upload" URI. Recommendations For Frog CMS version 0.9.5, consider restricting access to the...

CVE-2018-9992: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

Church Admin < 1.2550 - CSRF

The Church Admin WordPress plugin was affected by a CSRF security vulnerability...

GravCMS Core 1.4.2 Cross Site Scripting

Exploit Title: GravCMS Core Admin Plugin v1.4.2 - Persistent Cross-Site Scripting Date: 2017-06-07 Exploit Author: Ahsan Tahir Vendor Homepage: https://getgrav.org/ Software Link: https://getgrav.org/download/core/grav-admin/1.2.4 Version: 1.4.2 Tested on: Kali Linux 2.0 | Windows 8.1 Email:...