CVE-2020-36498

Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting XSS vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field...

CVE-2020-23047

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting XSS vulnerability in the search input field of the search module...

CVE-2023-43154

In Macrob7 Macs Framework Content Management System CMS 1.1.4f, loose comparison in "isValidLogin" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account...

CVE-2023-43154: Access of Resource Using Incompatible Type

In Macrob7 Macs Framework Content Management System CMS 1.1.4f, loose comparison in "isValidLogin" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account...

CVE-2020-23047

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting XSS vulnerability in the search input field of the search module...

CVE-2020-23047

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting XSS vulnerability in the search input field of the search module...

CVE-2020-23047

CVE-2020-23047 corresponds to a cross-site scripting (XSS) vulnerability in the Macrob7 Macs Framework Content Management System (CMS) version 1.14f, specifically in the search input field of the search module. Multiple connected sources confirm the issue and identify the affected product and ver...

PT-2021-10821

Name of the Vulnerable Software and Affected Versions Macrob7 Macs Framework Content Management System version 1.14f Description A SQL injection issue was found in the Macrob7 Macs Framework Content Management System. The issue is related to the roleId parameter in the editRole and deletUser...

CVE-2020-23045: Improper Neutralization of Special Elements used in an SQL Command

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the 'roleId' parameter of the editRole and deletUser modules...

PT-2021-10823

Name of the Vulnerable Software and Affected Versions Macrob7 Macs Framework Content Management System version 1.14f Description The issue is related to a cross-site scripting XSS vulnerability found in the search input field of the search module. This allows for potential malicious script...

PT-2021-12067

Name of the Vulnerable Software and Affected Versions: Macrob7 Macs Framework Content Management System version 1.14f Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field, specifically in the account reset function. This...

CVE-2020-36498: Improper Neutralization of Input During Web Page Generation

Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting XSS vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field...

CVE-2020-23047: Improper Neutralization of Input During Web Page Generation

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting XSS vulnerability in the search input field of the search module...