CVE-2020-15600: Cross-Site Request Forgery (CSRF)

An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password...

CVE-2018-15567

CMSUno before 1.5.3 has XSS via the title field...

CVE-2018-15567

CMSUno before 1.5.3 has XSS via the title field...

Design/Logic Flaw

CMSUno before 1.5.3 has XSS via the title field...

CVE-2018-15567

CMSUno before 1.5.3 has XSS via the title field...

CVE-2018-15567

CMSUno before 1.5.3 is vulnerable to a cross-site scripting (XSS) issue in the title field. The vulnerability is described as XSS via the title field, affecting versions prior to 1.5.3. Exploitation details, impacted components beyond the title field, and remediation steps are not provided in the...

CVE-2018-15567: Improper Neutralization of Input During Web Page Generation

CMSUno before 1.5.3 has XSS via the title field...

CMSUno Cross-Site Scripting Vulnerability

CMSUno is a content management system for creating single page responsive websites. A cross-site scripting vulnerability exists in CMSUno versions prior to 1.5.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the title field...