PT-2022-15806

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.6.0patch2 Description The issue allows an authenticated admin user to inject persistent JavaScript code inside the Site/Organization Name, Site Title, and Site Header parameters while updating the site settings on the...

OIC Exponent CMS Cross-Site Scripting Vulnerability

OIC Exponent CMS is a free, open source PHP-based modular content management system CMS from OIC, Inc. The system supports direct editing in pages and provides user management, site configuration, content editing and other functions.Exponent CMS has a cross-site scripting vulnerability, which...

How to Enable SSL on Cloud Connectors to Secure XML Traffic

This article describes how to enable SSL on Cloud Connectors to secure XML traffic from the StoreFront server and how to configure your StoreFront site to secure the XML traffic...