CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data in the Content Manager Menu. Attack Vectors:...

CVE-2023-43352-CMSmadesimple-SSTI--Content

CMSmadesimple SSTI v2.2.18 Author: Sergio Description: Server Side Template Injection SSTI vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to use native template syntax to inject a malicious payload into a template, which is then executed server-side. Attack Vectors: A SSTI...

Missing Authorization

Overview @strapi/content-manager is an A powerful UI to easily manage your data. Affected versions of this package are vulnerable to Missing Authorization via the content manager preview URL endpoint, which lacks content-scope authorization checks. A low-privileged admin can generate preview URLs...

@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +29 more potentially affected by CVE-2026-118171 via @strapi/content-manager (>=0.0.0-experimental.0008b7f1c9e3678ad260dac74a24f2d9f8d8a5c7, <=5.60.0)

@strapi/content-manager NPM version =0.0.0-experimental.0008b7f1c9e3678ad260dac74a24f2d9f8d8a5c7, =5.30.1, =1.0.0, =2.3.1, =2.0.0, =0.1.0, =2.0.0, =1.0.1, =0.0.0-experimental.0008b7f1c9e3678ad260dac74a24f2d9f8d8a5c7, =0.1.0, =0.2.0, =0.5.0 - custom-strapi-plugin-socket 1.0.2 - cypherscan-strapi...

CVE-2026-118171

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

EUVD-2026-111348

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

CVE-2026-118171

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

CVE-2026-118171

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

CVE-2026-118171 CVE-2026-118171

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

CVE-2026-118171 CVE-2026-118171

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

PT-2026-127200

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

Strapi Open Source and Enterprise Headless CMS authorization issue vulnerability

The Strapi Open Source and Enterprise Headless CMS versions 5.51.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of content scope authorization on the content manager preview URL endpoint. As a result, low-privilege administrators can generate preview URLs...

CVE-2026-118171: Undefined Security Weakness

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions...

EUVD-2026-106570

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful...

EUVD-2026-106514

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise iProcurement. Successful...

CVE-2026-91316

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful...

CVE-2026-91260

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise iProcurement. Successful...

CVE-2026-91316

A vulnerability exists in the iProcurement product of Oracle E-Business Suite , specifically affecting the E-Content Manager Catalog component in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise and potentially take over...

CVE-2026-91260

The iProcurement product of Oracle E-Business Suite is affected by a vulnerability in the E-Content Manager Catalog component, specifically in supported versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potenti...

PT-2026-119847

Vulnerability in the iProcurement product of Oracle E-Business Suite component: E-Content Manager Catalog. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful...