Lucene search
+L

3084 matches found

NVD
NVD
•added 2021/09/01 10:15 p.m.•28 views

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

5.4CVSS0.00503EPSS
SaveExploits1References1
NVD
NVD
•added 2021/09/01 10:15 p.m.•35 views

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

5.4CVSS0.00531EPSS
SaveExploits1References1
Prion
Prion
•added 2021/09/01 10:15 p.m.•29 views

Cross site scripting

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

3.5CVSS5.2AI score0.00549EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2021/09/01 10:15 p.m.•25 views

Cross site scripting

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

3.5CVSS5.3AI score0.00503EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/09/01 10:15 p.m.•26 views

Cross site scripting

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

3.5CVSS5.2AI score0.00531EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/09/01 10:15 p.m.•27 views

Cross site scripting

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

3.5CVSS5.2AI score0.00531EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/09/01 9:25 p.m.•64 views

CVE-2020-20349

CVE-2020-20349 affects WTCMS 1.0 and describes a stored cross-site scripting (XSS) vulnerability in the link address field of the background links module. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE records) as a stored XSS in that field; no exploit details or affecte...

5.4CVSS5.2AI score0.00531EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/09/01 9:25 p.m.•3 views

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

5.4CVSS0.00531EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/09/01 9:25 p.m.•48 views

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

5.3AI score0.00531EPSS
SaveExploits1References1
Mend
Mend
•added 2021/09/01 9:25 p.m.•2 views

CVE-2020-20348

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

5.4CVSS0.00531EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/09/01 9:25 p.m.•34 views

CVE-2020-20348

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

5.3AI score0.00531EPSS
SaveExploits1References1
Mend
Mend
•added 2021/09/01 9:25 p.m.•6 views

CVE-2020-20345

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

5.4CVSS0.00549EPSS
SaveExploits1References3
CVE
CVE
•added 2021/09/01 9:25 p.m.•61 views

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module. Connected documents confirm the issue across multiple databases, but do not provide concrete exploit details, affected versions beyond the stated 1.0, or a...

5.4CVSS5.2AI score0.00503EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/09/01 9:25 p.m.•4 views

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

5.4CVSS0.00503EPSS
SaveExploits1References1
Mend
Mend
•added 2021/09/01 9:25 p.m.•5 views

CVE-2020-20343

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...

7.1CVSS0.00425EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/09/01 9:25 p.m.•35 views

CVE-2020-20343

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...

6.5AI score0.00425EPSS
SaveExploits1References1
CVE
CVE
•added 2021/09/01 9:25 p.m.•64 views

CVE-2020-20343

CVE-2020-20343 : WTCMS 1.0 is vulnerable to a cross-site request forgery (CSRF) in the admin navigation add_post path (index.php?g=admin&m=nav&a=add_post). Exploitation would allow an attacker to cause arbitrary article creation in the administrator background. The vulnerability details are descr...

6.5CVSS6.4AI score0.00425EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/01 12:00 a.m.•8 views

CVE-2020-20348: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

5.4CVSS5.7AI score0.00531EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/01 12:00 a.m.•4 views

PT-2021-10484

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the link address field under the background links module. Recommendations: For WTCMS version 1.0, as a...

5.4CVSS0.00531EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/09/01 12:00 a.m.•6 views

PT-2021-10483

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the link field under the background menu management module. Recommendations: For WTCMS version 1.0,...

5.4CVSS0.00531EPSS
SaveExploits1References4
Rows per page
Query Builder