CVE-2024-31741

Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after login...

PT-2024-24193 · Minicms · Minicms

Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.11 Description: A Cross Site Scripting issue allows a remote attacker to run arbitrary code via a crafted string in the URL after login. Recommendations: For MiniCMS version 1.11, update to a version that includes a fix for...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2023-86328)

MiniCMS is the minimalist content management system for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.11, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to run arbitrary...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

Cross site scripting

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

The CVE-2023-46378 entry refers to a Stored Cross-Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 where a crafted string appended to /mc-admin/conf.php can cause arbitrary code execution. The issue is repeatedly described across multiple databases (NVD, CNVD, CNNVD, OSV, CVE List) as an XSS f...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

MiniCMS 跨站脚本漏洞

MiniCMS is the minimalist content management system for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.11, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to run arbitrary...

PT-2023-29987 · Minicms · Minicms

Name of the Vulnerable Software and Affected Versions: MiniCMS version 1.1.1 Description: The issue allows attackers to run arbitrary code via a crafted string appended to the "/mc-admin/conf.php" API endpoint. This is a Stored Cross Site Scripting XSS issue, which means that an attacker can inje...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

Cross site scripting

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

CVE-2021-33387

CVE-2021-33387 is a Cross Site Scripting vulnerability in MiniCMS v1.10 that allows an attacker to execute arbitrary code through a crafted GET request. Related sources (NVD/NIST, Red Hat, OSV, CVE listings) consistently describe MiniCMS-1.10 as vulnerable to XSS with high impact (confidentiality...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

CVE-2021-33387

Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request...

MiniCMS 跨站脚本漏洞

MiniCMS is the minimalist content management system for personal websites. A security vulnerability exists in MiniCMS version v.1.10 that originates from allowing an unauthenticated attacker to execute arbitrary code via a crafted get request...

CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...