CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

CVE-2018-16779 affects BlogCMS (through 2016-10-25) with a reflected/Stored XSS via a comment. The connected records confirm the issue existence and CVSS details (CVSS2 base 4.3, CVSS3 base 6.1) but do not provide affected versions beyond the date, or concrete exploitation details, patches, or mi...

CVE-2018-16780

Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment...

CVE-2018-16780

CVE-2018-16780 affects Complete Responsive CMS Blog up to 2018-05-20 and is due to an XSS via user comments. The available documents confirm the vulnerability type but do not provide product version details, exact vulnerable components, root cause specifics, exploit information, or remediation st...

CVE-2018-16374

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

CVE-2018-16374

Frog CMS 0.9.5 is affected by a stored cross-site scripting (XSS) vulnerability in the admin area, specifically via /admin/?/plugin/comment/settings. The issue is documented for CVE-2018-16374 and confirmed across multiple sources (NVD, CVE listings). The connected documents do not provide deeper...

CVE-2018-16374

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-10140)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A stored cross-site scripting vulnerability exists in Frog CMS 0.9.5, which can be exploited by an...

Weblate: flood of comment no rate limit on commnets >> by using different user agent

It was possible to post 200- 300 of comments within minutes, there was no rate limiting applied...

Cross Site Request Forgery (CSRF)

phpMyFAQ/phpMyFAQ is vulnerable to cross-site request forgery CSRF. The vulnerability exists because it does not check CSRF token properly in user.php, allowing the attacker to delete any active user, to remove open questions, to manipulate FAQ and FAQ news, to add votes and to add or delete...

CVE-2018-15603

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

CVE-2018-15603

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

Code injection

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

CVE-2018-15603

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

CVE-2018-15603

Victor CMS (up to 2018-05-10) is affected by a cross-site scripting (XSS) vulnerability in the Author field of the “Leave a Comment” screen. The issue allows injected script via this input. Root cause details are not provided beyond the XSS vector; no patch/version details are enumerated in the s...

Victor CMS Cross-Site Scripting Vulnerability

Victor CMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in Victor CMS 2018-05-10 and earlier versions. A remote attacker can exploit the vulnerability to execute JavaScript code with the Author field on the 'Leave a Comment' page...

Atlassian Confluence Questions Cross-Site Request Forgery Vulnerability (CNVD-2018-17881)

Atlassian Confluence Questions is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build enterprise WiKi's. The software enables collaboration and knowledge sharing among team members. A cross-site request forger...

Atlassian Confluence Questions Cross-Site Request Forgery Vulnerability

Atlassian Confluence Questions is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build enterprise WiKi's. The software enables collaboration and knowledge sharing among team members. A cross-site request forger...

CVE-2018-13394

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery CSRF vulnerability...