302 matches found
PT-2021-3843
Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.9 Description The issue is related to the unlink function in PHP, which can lead to Arbitrary File Deletion when user input affects the path of the file to remove without sufficient sanitization. This can allow a remote...
CSZ CMS Cross-Site Scripting Vulnerability (CNVD-2021-50172)
CSZ CMS is a PHP-based open source content management system CMS. CSZ CMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by entering a crafted payload in the "New Page" field under the "Page Content" module...
CSZ CMS Cross-Site Scripting Vulnerability (CNVD-2021-50173)
CSZ CMS is a PHP-based open source content management system CMS. CSZ CMS suffers from a cross-site scripting vulnerability that can be exploited to execute arbitrary web script or HTML via a specially crafted load entered in the "New Article" field under the "Article" plugin...
CVE-2020-25391
A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...
CVE-2020-25392
A cross site scripting XSS vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin...
Cross site scripting
A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...
CVE-2020-25391
A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...
CVE-2020-25391
CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability allowing arbitrary web script/HTML execution via a crafted payload in the New Pages field of the Pages Content module. The CVE-2020-25391 entry is corroborated by multiple sources (NVD, Red Hat advisory, CNVD, CVE list) and l...
CVE-2020-25391
A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...
CVE-2020-25392
CVE-2020-25392 affects CSZ CMS 1.2.9. The connected sources describe a Cross-Site Scripting (XSS) vulnerability exploitable through a crafted payload entered in the New Article field under the Article plugin, allowing execution of arbitrary web scripts/HTML in a user’s browser. The Red Hat/CNVD e...
CVE-2020-25392
A cross site scripting XSS vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin...
CVE-2020-25392
A cross site scripting XSS vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin...
CVE-2020-25392: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin...
CVE-2020-25391: Improper Neutralization of Input During Web Page Generation
A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...
PT-2021-11133
Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.2.9 Description: A cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New Pages field under the Pages Content module. Recommendations: For CSZ CMS...
PT-2021-11134
Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.2.9 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New Article field under the Article plugin. This enables attackers to...
SQL Injection Vulnerability in CSZ CMS
CSZ CMS is an open source content management system. CSZ CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
CSZ CMS Cross-Site Scripting Vulnerability (CNVD-2021-19691)
CSZ CMS is an open source content management system. A cross-site scripting vulnerability exists in several pages of CSZ CMS 1.2.9. The vulnerability can be exploited to conduct cross-site scripting attacks via field names...