CVE-2020-23655: Improper Neutralization of Input During Web Page Generation

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...

PT-2020-15569

Name of the Vulnerable Software and Affected Versions NavigateCMS version 2.9 Description The issue is related to Cross Site Scripting XSS and is exploitable via the module "Shop". Recommendations For NavigateCMS version 2.9, consider disabling the "Shop" module until a patch is available...

CVE-2020-23657: Improper Neutralization of Input During Web Page Generation

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...

demo.navigatecms.com XSS vulnerability

Open Bug Bounty ID: OBB-678083 Description| Value ---|--- Affected Website:| demo.navigatecms.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...