47 matches found
enhavo cross-site scripting vulnerability
enhavo is a set of open source CMS written in PHP based on the Symfony framework content management system. A cross-site scripting vulnerability exists in enhavo version 0.4.0. A remote attacker can exploit this vulnerability to inject and execute arbitrary types of JavaScript code...
CVE-2018-8832
enhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group name. The XSS attack launches when a victim visits the admin user group page...
CVE-2018-8832
enhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group name. The XSS attack launches when a victim visits the admin user group page...
Design/Logic Flaw
enhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group name. The XSS attack launches when a victim visits the admin user group page...
CVE-2018-8832
enhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group name. The XSS attack launches when a victim visits the admin user group page...
CVE-2018-8832
enhavo 0.4.0 (PHP Symfony-based CMS) has a cross-site scripting vulnerability where a user-group name can contain executable JavaScript. The attack triggers when a victim visits the admin user group page, indicating that the vulnerable input is not properly sanitized on that page. The available s...
