45828 matches found
PT-2025-47315
Name of the Vulnerable Software and Affected Versions Windu CMS version 4.1 Windu CMS affected versions not specified Description Windu CMS has multiple Stored Cross-Site Scripting XSS issues in the page editing endpoint ''/windu/admin/content/pages/edit/''. A user with privileges can exploit thi...
Windu CMS 跨站脚本漏洞
Windu CMS Windu CMS is a lightweight web content management system CMS from Windu. A cross-site scripting vulnerability exists in Windu CMS version 4.1 that stems from insufficient input validation and could lead to a stored cross-site scripting attack...
Windu CMS 安全漏洞
Windu CMS Windu CMS is a lightweight web content management system CMS. A security vulnerability exists in Windu CMS version 4.1, which stems from improper access control and could result in a privileged user deleting the Super Administrator...
Windu CMS 跨站脚本漏洞
Windu CMS Windu CMS is a lightweight web content management system CMS from Windu. A cross-site scripting vulnerability exists in Windu CMS version 4.1 that stems from insufficient input validation and could lead to a stored cross-site scripting attack...
PT-2025-47308
Name of the Vulnerable Software and Affected Versions Windu CMS version 4.1 Windu CMS affected versions not specified Description Windu CMS has a flaw that allows attackers to perform Cross-Site Request Forgery CSRF attacks in the user editing functionality. The existing CSRF protection can be...
PT-2025-47309
Name of the Vulnerable Software and Affected Versions Windu CMS version 4.1 Windu CMS affected versions not specified Description Windu CMS has a flaw related to access control in the user editing feature. An attacker with sufficient privileges can send a GET request to delete Super Admins, a...
Kirby 跨站脚本漏洞
Kirby is a file-based content management system CMS from Kirby open source. A cross-site scripting vulnerability exists in Kirby versions 5.0.0 through 5.1.3, which stems from malicious string modification and content field manipulation that could lead to malicious code execution...
PT-2025-47313
Name of the Vulnerable Software and Affected Versions Windu CMS version 4.1 Windu CMS affected versions not specified Description Windu CMS is susceptible to Stored Cross-Site Scripting XSS in the logon page due to inadequate input validation. A malicious actor can inject arbitrary HTML and...
PT-2025-47312
Name of the Vulnerable Software and Affected Versions Windu CMS version 4.1 Windu CMS affected versions not specified Description Windu CMS is susceptible to a Cross-Site Request Forgery CSRF issue within its file uploading functionality. A malicious actor can create a specially crafted website...
Windu CMS 跨站请求伪造漏洞
Windu CMS Windu CMS is a lightweight web content management system CMS from Windu. A cross-site request forgery vulnerability exists in Windu CMS version 4.1, which stems from insufficient cross-site request forgery protection and could lead to malicious file uploads...
CVE-2025-63828
Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...
Windu CMS 跨站请求伪造漏洞
Windu CMS Windu CMS is a lightweight web content management system CMS from Windu Inc. A cross-site request forgery vulnerability exists in Windu CMS version 4.1, which stems from a CSRF protection mechanism that can be bypassed, potentially leading to cross-site request forgery attacks...
PT-2025-47370
Name of the Vulnerable Software and Affected Versions Backdrop CMS version 1.32.1 Description A Host Header Injection flaw exists in Backdrop CMS. This issue allows attackers to manipulate the Host header within password reset requests. Successful exploitation can lead to redirection to malicious...
Backdrop CMS 安全漏洞
Backdrop CMS is a content management system CMS from Backdrop CMS open source. A security vulnerability exists in Backdrop CMS version 1.32.1 that stems from improper manipulation of the Host header in a password reset request, which could lead to redirection to a malicious domain and session...
CVE-2025-63828
CVE-2025-63828 is a host header injection vulnerability in Backdrop CMS 1.32.1. The issue arises from manipulation of the Host header during password reset requests, which can cause redirects to malicious domains and may enable session hijacking via cookie injection. Documents consistently descri...
Windu CMS 安全漏洞
Windu CMS Windu CMS is a lightweight web content management system CMS from Windu. A security vulnerability exists in Windu CMS version 4.1, which stems from insufficient client-side brute force protection and could lead to brute force attacks...
CVE-2025-63828
Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...
PT-2025-47310
Name of the Vulnerable Software and Affected Versions Windu CMS version 4.1 Windu CMS affected versions not specified Description Windu CMS is susceptible to a Cross-Site Request Forgery CSRF issue within the user editing functionality. A malicious actor can create a specially crafted website tha...
