938 matches found
CVE-2023-43352-CMSmadesimple-SSTI--Content
CMSmadesimple SSTI v2.2.18 Author: Sergio Description: Server Side Template Injection SSTI vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to use native template syntax to inject a malicious payload into a template, which is then executed server-side. Attack Vectors: A SSTI...
CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager
CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data in the Content Manager Menu. Attack Vectors:...
CVE-2026-108114
Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields,...
CVE-2026-108114 Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions
Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields,...
EUVD-2026-96338
Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields,...
CVE-2026-108114: Incorrect Authorization
Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields,...
Security Bulletin: Bouncy Castle(bcprov and bcpg) security vulnerability in IBM FileNet Content Manager(FNCM) reported for FileNet Deployment Manager(FDM)
Summary IBM FileNet Content ManagerFNCM 5.7.0-IF6 addresses multiple Bouncy Castle CVEs reported for FileNet Deployment ManagerFDM Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This iss...
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
EUVD-2026-92953
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
CVE-2026-39599
The WDS MCP Content Manager WordPress plugin affects versions
PT-2026-106327
Name of the Vulnerable Software and Affected Versions WDS MCP Content Manager versions prior to 3.10.5 Description A broken access control issue exists for contributors, allowing unauthorized access or actions within the system. Recommendations Update to a version newer than 3.10.4...
CVE-2026-39599: Missing Authorization
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WDS MCP Content Manager versions = 3.10.4...
CVE-2026-97239
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
EUVD-2026-89903
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...