CVE-2023-49485: Improper Neutralization of Input During Web Page Generation

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...

CVE-2023-49485

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Column Management component. An attacker can inject malicious scripts that are executed when users interact with the web application by exploiting the lack of proper input sanitisation. Details Cross-sit...

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

Cross site scripting

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

SiteServerCMS Cross-Site Scripting Vulnerability

SSCMS SiteServerCMS SSCMS is an open source, cross-platform, enterprise-class content management system from China's SSCMS Inc. A cross-site scripting vulnerability exists in SiteServerCMS version 7.2.2, which stems from a cross-site scripting XSS vulnerability in the Column Management component...

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

CVE-2023-43951

CVE-2023-43951 affects SSCMS version 7.2.2, with a cross-site scripting (XSS) vulnerability in the Column Management component. The Redhat/EUVD/CNNVD and third-party sources corroborate an XSS flaw in SSCMS 7.2.2 via Column Management. Exploitation details are not provided in the documents; no in...

CVE-2023-43951

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

CVE-2023-43951: Improper Neutralization of Input During Web Page Generation

SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...

PT-2023-29046 · Sscms · Sscms

Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A cross-site scripting XSS issue was found in the Column Management component. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: For...

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

CVE-2023-43232: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

EyouCms Cross-Site Scripting Vulnerability (CNVD-2023-58096)

EyouCms is an open source content management system CMS based on ThinkPHP. EyouCms has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the Column management module, which can be exploited by an attacker to execute arbitrar...