CVE-2021-39599

CVE-2021-39599 affects CXUUCMS 3.1, with multiple XSS vulnerabilities in public/search.php (search parameter) and admin.php (c parameter). The root cause is unsanitized input leading to client-side code execution. Impact is documented as XSS with potential impact on confidentiality/integrity depe...

Cxuucms 跨站脚本漏洞

Cxuucms is a PHP-based content-relational website builder. CXUUCMS suffers from a cross-site scripting vulnerability that originates from multiple cross-site scripting XSS vulnerabilities in the search and c parameters in public/search.php and the c parameter in admin.php in version 3.1 of CXUUCM...

PT-2021-22671

Name of the Vulnerable Software and Affected Versions: CXUUCMS version 3.1 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in CXUUCMS. The vulnerabilities are found in the search and c parameters in "public/search.php" and in the c parameter in "admin.php". Recommendations: F...

CVE-2021-39599: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in 1 public/search.php and in the 2 c parameter in admin.php...

CXUUCMS Cross-Site Scripting Vulnerability (CNVD-2020-75157)

CxuuCms is an easy-to-use, open source PHP+Mysql based content management system. CXUUCMS V3 suffers from a class="layui-input" cross-site scripting vulnerability. No detailed vulnerability details are currently available...

CVE-2020-29249

CXUUCMS V3 allows class="layui-input" XSS...

CVE-2020-29249

CXUUCMS V3 allows class="layui-input" XSS...

CVE-2020-29250

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

CVE-2020-29250

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

Design/Logic Flaw

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

Cross site scripting

CXUUCMS V3 allows class="layui-input" XSS...

CVE-2020-29250

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

CVE-2020-29250

CXUUCMS V3 contains a Cross-Site Scripting (XSS) vulnerability that can be triggered via the first and third input fields to /public/admin.php. The issue is documented across multiple connected sources (e.g., Red Hat, CNVD, CVE records) and is described as CXUUCMS V3 allowing XSS through those in...

CVE-2020-29249

CXUUCMS V3 allows class="layui-input" XSS...

CVE-2020-29249

CXUUCMS V3 is affected by CVE-2020-29249, a Cross-Site Scripting vulnerability tied to the class="layui-input" element. The issue is documented across multiple feeds (NVD, CNVD, Red Hat, CNVD CNVD-2020-75157, etc.) as a CXUUCMS V3 XSS vulnerability. CVSS metrics indicate a base score around 6.1 (...

CVE-2020-29249

CXUUCMS V3 allows class="layui-input" XSS...

CVE-2020-29249: Improper Neutralization of Input During Web Page Generation

CXUUCMS V3 allows class="layui-input" XSS...

CVE-2020-29250: Improper Neutralization of Input During Web Page Generation

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

PT-2020-17123

Name of the Vulnerable Software and Affected Versions CXUUCMS version V3 Description The issue allows for class="layui-input" XSS. Recommendations For CXUUCMS version V3, consider disabling the layui-input class until a patch is available. Restrict access to potentially vulnerable input fields to...

Cxuucms 跨站脚本漏洞

CxuuCms is an easy-to-use, open source PHP+Mysql based content management system. A cross-site scripting vulnerability exists in CXUUCMS V3. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the first and third input fields of /public/admin.php...