Information Disclosure

github.com/go-gitea/gitea is vulnerable to information disclosure attacks. The vulnerability exists where all users emails would be disclosed when an issue comment mail is sent out when it was not supposed to, causing the information disclosure vulnerability...

CVE-2018-14802

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution...

CVE-2018-17077

An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed...

CVE-2018-16780

Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment...

CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

CVE-2018-16779 affects BlogCMS (through 2016-10-25) with a reflected/Stored XSS via a comment. The connected records confirm the issue existence and CVSS details (CVSS2 base 4.3, CVSS3 base 6.1) but do not provide affected versions beyond the date, or concrete exploitation details, patches, or mi...

CVE-2018-16780

CVE-2018-16780 affects Complete Responsive CMS Blog up to 2018-05-20 and is due to an XSS via user comments. The available documents confirm the vulnerability type but do not provide product version details, exact vulnerable components, root cause specifics, exploit information, or remediation st...

CVE-2018-16780

Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment...

PT-2018-13742

Name of the Vulnerable Software and Affected Versions BlogCMS versions prior to 2016-10-25 Description The issue allows for XSS via a comment. Recommendations For versions prior to 2016-10-25, update to a version released after 2016-10-25 to resolve the issue...

CVE-2018-16780: Improper Neutralization of Input During Web Page Generation

Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment...

PT-2018-13743

Name of the Vulnerable Software and Affected Versions Complete Responsive CMS Blog versions through 2018-05-20 Description The issue allows for XSS via a comment. Recommendations For versions through 2018-05-20, update to a version released after 2018-05-20 to resolve the issue...

CVE-2018-16779: Improper Neutralization of Input During Web Page Generation

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16374

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16374

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16374

Frog CMS 0.9.5 is affected by a stored cross-site scripting (XSS) vulnerability in the admin area, specifically via /admin/?/plugin/comment/settings. The issue is documented for CVE-2018-16374 and confirmed across multiple sources (NVD, CVE listings). The connected documents do not provide deeper...

PT-2018-13528

Name of the Vulnerable Software and Affected Versions Frog CMS version 0.9.5 Description The issue is related to stored XSS. It can be exploited via the "/admin/?/plugin/comment/settings" API endpoint. Recommendations For Frog CMS version 0.9.5, update to a version that contains a fix for this...

CVE-2018-16374: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-10140)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A stored cross-site scripting vulnerability exists in Frog CMS 0.9.5, which can be exploited by an...