CVE-2023-45878

Gibbon CMS CVE-2023-45878 Exploit This Python script exploits CVE-2023-45878, an unauthenticated arbitrary file upload vulnerability in Gibbon CMS versions 25.0.1 and before, leading to Remote Code Execution RCE. Vulnerability Description CVE-2023-45878 exists in the rubricsvisualisesaveAjax.php...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

EUVD-2022-28796

Malicious code in bioql PyPI...

EUVD-2022-28005

Malicious code in bioql PyPI...

CVE-2025-26211

Gibbon before 29.0.00 allows CSRF...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

Exploit for Out-of-bounds Write in Gibbonedu Gibbon

Gibbon CMS CVE-2023-45878 Exploit This Python script exploi...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-23871

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-23871

CVE-2022-23871 affects Gibbon CMS v22.0.01, with XSS in the outcomes_addProcess.php component. The root cause is insufficient validation of client-supplied input in the name, category, and description fields, enabling attackers to inject arbitrary web scripts or HTML in a user’s browser. Multiple...

CVE-2022-23871: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

Cross site scripting

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

CVE-2022-22868

CVE-2022-22868 refers to an XSS vulnerability in Gibbon CMS v22.0.01 where an attacker can inject arbitrary script via the name parameter. The issue is documented across multiple sources (NVD, Red Hat, osv.dev, CVE List, PRION, CNNVD). The connected documents do not provide a patch version or rem...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

CVE-2022-22868

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...

CVE-2022-22868: Improper Neutralization of Input During Web Page Generation

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting XSS vulnerability, that allows attackers to inject arbitrary script via name parameters...