9398 matches found
CVE-2018-19901
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...
CVE-2018-19901
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...
Cross site scripting
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle "keyword" parameter...
CVE-2018-19901
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...
CVE-2018-19902
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle "keyword" parameter...
CVE-2018-19901
CVE-2018-19901 affects No-CMS 1.1.3 and is described as a persistent XSS vulnerability exploitable via the blog/manage_article/index/“article_title” parameter. The available public records identify the vulnerable component/entry point but do not provide exploit code, affected versions beyond 1.1....
PT-2018-15152
Name of the Vulnerable Software and Affected Versions No-CMS version 1.1.3 Description The issue allows for Persistent XSS attacks through the keyword parameter in the "blog/manage article" endpoint. Recommendations For No-CMS version 1.1.3, avoid using the keyword parameter in the "blog/manage...
PT-2018-15151
Name of the Vulnerable Software and Affected Versions No-CMS version 1.1.3 Description The issue allows for Persistent XSS attacks through the "article title" parameter in the blog/manage article/index/ endpoint. Recommendations For version 1.1.3, avoid using the article title parameter in the...
CVE-2018-19901: Improper Neutralization of Input During Web Page Generation
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...
CVE-2018-19902: Improper Neutralization of Input During Web Page Generation
No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle "keyword" parameter...
Mezzanine Cross-Site Scripting Vulnerability
Mezzanine CMS is a set of open source content management system CMS built using the DJANGO framework. A cross-site scripting vulnerability exists in admin/blog/blogpost/add/ in Mezzanine CMS version 4.3.1. A remote attacker can create a cross-site scripting vulnerability in...
Design/Logic Flaw
Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?tofield=id&popup=1 title parameter at admin/blog/blogpost/add/...
CVE-2018-16632
Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?tofield=id&popup=1 title parameter at admin/blog/blogpost/add/...
CVE-2018-16632
Mezzanine CMS v4.3.1 is affected by CVE-2018-16632. The vulnerability is a Cross Site Scripting (XSS) flaw triggered via the title parameter in the admin/blog/blogcategory/add/ flow, specifically through the URL /admin/blog/blogcategory/add/?_to_field=id&_popup=1 on the related admin/blog/blogpos...
CVE-2018-16632
Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?tofield=id&popup=1 title parameter at admin/blog/blogpost/add/...
CVE-2018-16632: Improper Neutralization of Input During Web Page Generation
Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?tofield=id&popup=1 title parameter at admin/blog/blogpost/add/...
Jetpack <= 6.4.2 - Authenticated Stored Cross-Site Scripting (XSS)
According to RIPS Technologies: "RIPS detected a Stored XSS vulnerability that affects a module available to premium and professional users of Jetpack. Attackers who gained control over an account on the target site with at least Contributor privileges were able to inject arbitrary JavaScript cod...
Friday Squid Blogging: Problems with the Squid Emoji
The Monterey Bay Aquarium has some problems with the squid emoji. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...