Lucene search
+L

67 matches found

Cvelist
Cvelist
•added 2022/05/05 9:20 a.m.•42 views

CVE-2022-1590 Bludit New Content Module new-content cross site scripting

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input alert1 leads to cross site scripting. The attack can be initiated remotely...

3.5CVSS5.4AI score0.00676EPSS
SaveExploits1References2
CVE
CVE
•added 2022/05/05 9:20 a.m.•68 views

CVE-2022-1590

Bludit 3.13.1 is affected by a Cross-Site Scripting vulnerability in the New Content module, exposed via the /admin/new-content endpoint. The issue stems from unsafely handling user-supplied content (example payload: ), enabling client-side script execution. The attack is remotely initiable but r...

5.4CVSS4.3AI score0.00676EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•2 views

CVE-2022-1590: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input leads to cross site scripting. The attack can be initiated remotely but...

5.4CVSS4AI score0.00676EPSS
SaveExploits1References3
NVD
NVD
•added 2022/04/27 8:15 a.m.•40 views

CVE-2022-1503

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

5.4CVSS0.00659EPSS
SaveExploits1References2
Prion
Prion
•added 2022/04/27 8:15 a.m.•25 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

3.5CVSS5.3AI score0.00659EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/04/27 7:50 a.m.•39 views

CVE-2022-1503 GetSimple CMS Content Module edit.php cross site scripting

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

3.5CVSS5.5AI score0.00659EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/04/27 7:50 a.m.•16 views

CVE-2022-1503 GetSimple CMS Content Module edit.php cross site scripting

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

3.5CVSS5.5AI score0.00659EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/27 12:00 a.m.•4 views

CVE-2022-1503: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like leads to cross site scripting. The attack may be launched remotely but...

5.4CVSS4.1AI score0.00659EPSS
SaveExploits1References3
OSV
OSV
•added 2021/07/09 10:15 p.m.•16 views

CVE-2020-25391

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

5.4CVSS5.6AI score0.0045EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/09 10:15 p.m.•29 views

CVE-2020-25391

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

5.4CVSS0.0045EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/07/09 9:56 p.m.•38 views

CVE-2020-25391

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

5.5AI score0.0045EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/11/03 12:00 a.m.•8 views

File Inclusion Vulnerability in BEESCMS Enterprise Website Management System

BEESCMS enterprise website management system is a PHP + MYSQL, multi-language system, the content module is easy to expand, the template style. A file inclusion vulnerability exists in BEESCMS enterprise website management system. An attacker can exploit this vulnerability to gain server privileg...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/08/27 12:00 a.m.•11 views

Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-49437)

Navigate CMS is a powerful and intuitive content management system. A cross-site scripting vulnerability exists in the Content module of Navigate CMS 2.9. This vulnerability can be exploited by attackers to conduct cross-site scripting attacks...

5.4CVSS6.2AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2020/08/26 5:15 p.m.•36 views

CVE-2020-23656

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...

5.4CVSS5.4AI score0.00531EPSS
SaveExploits1References1
OSV
OSV
•added 2020/08/26 5:15 p.m.•11 views

CVE-2020-23656

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...

5.4CVSS6.1AI score0.00531EPSS
SaveExploits1References1
Prion
Prion
•added 2020/08/26 5:15 p.m.•24 views

Cross site scripting

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...

3.5CVSS5.3AI score0.00531EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/08/26 4:53 p.m.•32 views

CVE-2020-23656

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...

5.4AI score0.00531EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/26 12:00 a.m.•3 views

CVE-2020-23656: Improper Neutralization of Input During Web Page Generation

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...

5.4CVSS5.8AI score0.00531EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/07/24 12:00 a.m.•8 views

SQL Injection Vulnerability in BEESCMS

BEESCMS adopts PHP+MYSQL is a multi-language system, the content module is easy to expand, and the template style is diversified. BEESCMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/06/12 12:00 a.m.•6 views

PHPCMS version 9.1.5 to 9.6.3 SQL injection vulnerability in content module si***.php page

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. PHPCMS 9.1.5 to 9.6.3 versions of the content module si.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

7.8AI score
SaveExploits0
Rows per page
Query Builder