97 matches found
Cross site scripting
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...
CVE-2020-24993
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when visitors access the article module...
CVE-2020-24993
Technical details of CVE-2020-24993 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories; no specifics on affected components, exploit method, or fixes are given here.
CVE-2020-24993
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when visitors access the article module...
CVE-2020-24992
CVE-2020-24992 affects CmsWing 1.3.7. The connected Red Hat/CNVD/CNNVD and CVE aggregations confirm a stored cross-site scripting (XSS) vulnerability that is triggered when an administrator accesses the content management module. The available descriptions consistently state the vulnerability typ...
CVE-2020-24992
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...
CVE-2020-24992
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...
CMSWing Cross-Site Script Vulnerabilities
CMSWing is an e-commerce platform and CMS building system based on ThinkJS and MySQL. A cross-site scripting vulnerability exists in CmsWing version 1.3.7, which stems from a vulnerability that is triggered when a visitor accesses the Articles module. No detailed vulnerability details are availab...
CVE-2020-24993: Improper Neutralization of Input During Web Page Generation
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when visitors access the article module...
PT-2021-11097
Name of the Vulnerable Software and Affected Versions: CmsWing version 1.3.7 Description: The issue is a cross-site scripting vulnerability, specifically a stored XSS, which is triggered when visitors access the article module. Recommendations: For CmsWing version 1.3.7, consider disabling access...
PT-2021-11096
Name of the Vulnerable Software and Affected Versions: CmsWing version 1.3.7 Description: The issue is a cross-site scripting vulnerability, specifically a stored XSS. It is triggered when an administrator accesses the content management module. Recommendations: For CmsWing version 1.3.7, conside...
CVE-2020-24992: Improper Neutralization of Input During Web Page Generation
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...
CMSWing Cross-Site Scripting Vulnerabilities
CMSWing is an e-commerce platform and CMS building system based on ThinkJS and MySQL. A cross-site scripting vulnerability exists in CmsWing version 1.3.7, which stems from a vulnerability that is triggered when an administrator accesses the content management module. No detailed vulnerability...
CmsWing Project SQL Injection (CVE-2020-20296)
An SQL injection vulnerability exists in CmsWing Project. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CMSWing SQL Injection Vulnerability
CMSWing is a ThinkJS-based e-commerce platform and CMS builder. A SQL injection vulnerability exists in CMSWing 1.3.8. The vulnerability stems from the rechargeAction function not checking the balance parameter. An attacker can exploit this vulnerability to execute arbitrary SQL commands via...
CMSWing SQL Injection Vulnerability (CNVD-2021-09500)
CMSWing is a ThinkJS-based e-commerce platform and CMS builder. CMSWing 1.3.8 suffers from a SQL injection vulnerability. The vulnerability stems from the updateAction function not checking the detail parameter. An attacker can exploit this vulnerability to execute arbitrary SQL commands via...
CMSWing Code Execution Vulnerability
CMSWing is a ThinkJS-based e-commerce platform and CMS builder. A code execution vulnerability exists in CMSWing 1.3.8. The vulnerability stems from the log function not checking the log parameter. An attacker can exploit this vulnerability to execute arbitrary commands via malicious parameters...
CVE-2020-20294
An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands...