32 matches found
CVE-2024-37846
MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection CSTI vulnerability via the Platform Management Edit page...
CVE-2024-37845
MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the Active Process Command feature...
PT-2024-27781 · Mango Api +1 · Mango Api +1
Name of the Vulnerable Software and Affected Versions: MangoOS versions prior to 5.1.4 Mango API versions prior to 4.5.5 Description: An arbitrary file upload issue allows attackers to execute arbitrary code via a crafted file. Recommendations: For MangoOS versions prior to 5.1.4, update to versi...
PT-2024-27778 · Mangoos · Mangoos
Name of the Vulnerable Software and Affected Versions: MangoOS versions prior to 5.2.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For versions prior to 5.2.0, update to version 5.2.0 or lat...
MangoOS 安全漏洞
MangoOS is an open source JavaScript object-oriented programming library from Automattic. A security vulnerability exists in MangoOS versions prior to 5.2.0, which stems from a client-side template injection that can be achieved through the platform's administrative edit page...
CVE-2024-37844
A stored cross-site scripting XSS vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2024-37846
MangoOS before 5.2.0 is affected by a Client-Side Template Injection (CSTI) vulnerability exposed on the Platform Management Edit page. The issue is tied to the Platform Management Edit page and allows CSTI, with sources indicating that versions prior to 5.2.0 are vulnerable. The connected Red Ha...
MangoOS 安全漏洞
MangoOS is an open source JavaScript object-oriented programming library from Automattic. A security vulnerability exists in MangoOS versions prior to 5.1.4 and Mango API versions prior to 4.5.5, which originates from an arbitrary file upload and allows attackers to execute arbitrary code via a...
MangoOS 安全漏洞
MangoOS is an open source JavaScript object-oriented programming library from Automattic. A security vulnerability exists in MangoOS versions prior to 5.2.0, which stems from authenticated Remote Code Execution RCE via the Active Process Command feature...
PT-2024-27779 · Mangoos · Mangoos
Name of the Vulnerable Software and Affected Versions: MangoOS versions prior to 5.2.0 Description: The issue is an authenticated remote code execution RCE vulnerability via the Active Process Command feature. Recommendations: For versions prior to 5.2.0, update to version 5.2.0 or later to resol...
