128 matches found
CVE-2026-52307
CVE-2026-52307: 1CMS v5.6 Authenticated Stored XSS Vulnerability Introduction This repository contains the reproduction of CVE-2026-52307 , an authenticated stored cross-site scripting XSS vulnerability discovered in 1CMS v5.6 formerly ClassCMS. A proof-of-concept PoC is provided to demonstrate t...
CVE-2022-25581
CVE-2022-25581 Can't find it anywhere on the web, leaving a backup, Python exploit script , used to automate the following steps: ✅ Script Functionality Objectives 1. Log in to the backend obtain csrf and token 2. Construct a malicious request packet to upload a compressed archive containing a...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307: Improper Neutralization of Input During Web Page Generation
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
PT-2026-87172
Name of the Vulnerable Software and Affected Versions ClassCMS 1CMS version 5.6 Description An authenticated stored cross-site scripting XSS issue exists in the Column Management component. This allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307
An authenticated stored cross-site scripting (XSS) vulnerability exists in the Column Management component of ClassCMS 1CMS v5.6 (formerly ClassCMS). The flaw allows an authenticated administrator to inject a crafted payload into the title field on the Article Edit page. When other users view the...
EUVD-2026-72956
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
EUVD-2024-48971
Malicious code in bioql PyPI...
EUVD-2024-48972
Malicious code in bioql PyPI...
EUVD-2024-47918
Malicious code in bioql PyPI...
EUVD-2024-50914
Malicious code in bioql PyPI...
EUVD-2024-53530
Malicious code in bioql PyPI...
EUVD-2022-30243
Malicious code in bioql PyPI...
EUVD-2024-53532
Malicious code in bioql PyPI...
EUVD-2022-30242
Malicious code in bioql PyPI...
EUVD-2024-51040
Malicious code in bioql PyPI...
CVE-2024-8144
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Logo Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...
CVE-2024-8145
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...