62 matches found
Jianhua Sun LightCMS Cross-Site Scripting Vulnerability
Jianhua Sun LightCMS is Jianhua Sun open source an application . Provides a lightweight CMS system , can also be used as a general-purpose back-end management framework . Jianhua Sun LightCMS v2.0 version of a cross-site scripting vulnerability , the vulnerability stems from the Management -...
CVE-2024-22559
LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...
PT-2024-19485 · Lightcms · Lightcms
Name of the Vulnerable Software and Affected Versions: LightCMS version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Content Management - Articles field. Recommendations: For version 2.0, update to a newer version that contains a fix for this issue, if available. If no...
CVE-2024-22559
LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...
CVE-2024-22559
CVE-2024-22559 affects LightCMS v2.0 with a Cross Site Scripting (XSS) vulnerability in the Content Management – Articles field. The CVSSv3.1 base score is 5.4 (Medium) with Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: Required, Scope: Changed, and imp...
CVE-2024-22559
LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...
CVE-2023-27060
LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...
Remote code execution
LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...
PT-2023-20922 · Lightcms · Lightcms
Name of the Vulnerable Software and Affected Versions: LightCMS version 1.3.7 Description: The issue is related to a remote code execution RCE vulnerability. It is specifically exploitable via the image:make function. Recommendations: For LightCMS version 1.3.7, as a temporary workaround, conside...
CVE-2023-27060
LightCMS v1.3.7 contains a remote code execution (RCE) vulnerability exploitable via the image:make function. Affected software: LightCMS 1.3.7. Root cause: ability to trigger arbitrary code execution through image:make. Impact: high/critical risk (per CVSS 3.1 metrics in the CVE entry). Remediat...
CVE-2023-27060
LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...
LightCMS 安全漏洞
Jianhua Sun LightCMS is Jianhua Sun open source an application . Provides a lightweight CMS system can also be used as a general-purpose back-end management framework . LightCMS v1.3.7 version of a security vulnerability , the vulnerability stems from the image: make function has a remote code...
CVE-2023-27060
LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...
CVE-2023-27060
LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...
LightCMS Cross-Site Scripting Vulnerability (CNVD-2022-65330)
Jianhua Sun LightCMS is an open source application from Jianhua Sun . Jianhua Sun LightCMS v1.3.11 contains a cross-site scripting vulnerability that stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit the vulnerability to execute JavaScript cod...
CVE-2022-33009
A stored cross-site scripting XSS vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file...
Cross site scripting
A stored cross-site scripting XSS vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file...
CVE-2022-33009
LightCMS v1.3.11 has a stored XSS vulnerability exploitable by uploading a crafted PDF file. Root cause: insufficient validation of user-supplied data and output filtering. Impact is client-side script execution. Affected version: LightCMS 1.3.11. No remediation details are provided in the suppli...