153 matches found
CVE-2026-18478
Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...
EUVD-2026-55624
Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...
CVE-2026-18478
Magnolia CMS is affected by a Stored XSS in the import functionality (CVE-2026-18478). An attacker with editor privileges can inject arbitrary HTML/JavaScript into the name of an uploaded image, which is rendered/executed when the image is opened. The issue is fixed in Magnolia CMS version 6.3.10...
CVE-2026-18478
Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...
CVE-2026-18478 Stored XSS in Magnolia CMS
Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...
EUVD-2013-4477
Malware in sbrugna...
EUVD-2008-0711
Malware in sbrugna...
EUVD-2021-12773
Malware in sbrugna...
EUVD-2008-1951
Malware in sbrugna...
EUVD-2021-12774
Malware in sbrugna...
EUVD-2005-4356
Malware in sbrugna...
EUVD-2022-1059
Malicious code in bioql PyPI...
EUVD-2022-1088
Malicious code in bioql PyPI...
EUVD-2022-0855
Malicious code in bioql PyPI...
EUVD-2022-0796
Malicious code in bioql PyPI...
EUVD-2022-36154
Malicious code in bioql PyPI...
EUVD-2021-33049
Malicious code in bioql PyPI...
EUVD-2022-1138
Malicious code in bioql PyPI...
CVE-2022-33098
Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting XSS vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...