Lucene search
+L

9 matches found

EUVD
EUVD
added 2026/08/10 1:0 p.m.9 views

EUVD-2026-55624

Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...

5.1CVSS5.2AI score0.00281EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2005-4356

Malware in sbrugna...

4.3CVSS6.4AI score0.01739EPSS
SaveExploits1References6
OSV
OSV
added 2022/02/11 9:15 p.m.9 views

CVE-2021-46366

An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery CSRF in order to brute force and exfiltrate users' credentials...

8.8CVSS7.3AI score0.00758EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/02 12:15 p.m.11 views

CVE-2021-25893

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting XSS vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/...

5.4CVSS6AI score0.00878EPSS
SaveExploits1References3
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

Magnolia Search Module 2.1 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issu...

7.1AI score
SaveExploits0
CVE
CVE
added 2005/12/20 1:0 a.m.42 views

CVE-2005-4361

Magnolia Content Management Suite 2.1 is affected by a cross-site scripting (XSS) vulnerability in search.html that allows an attacker to inject arbitrary script or HTML via the query parameter. The issue is described across multiple sources (NVD and CVE records) with the vulnerability specifical...

4.3CVSS6AI score0.01739EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2005/12/20 1:0 a.m.24 views

CVE-2005-4361

Cross-site scripting XSS vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

5.7AI score0.01739EPSS
SaveExploits1References5
exploitpack
exploitpack
added 2005/12/19 12:0 a.m.16 views

Magnolia Search Module 2.1 - Cross-Site Scripting

Magnolia Search Module 2.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/12/19 12:0 a.m.33 views

Magnolia Search Module 2.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

4.3CVSS5.8AI score0.01739EPSS
SaveExploits1
Rows per page
Query Builder