CVE-2021-42970

Cross Site Scripting XSS vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter...

CVE-2021-42970: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter...

Htmly Cross-Site Scripting Vulnerability (CNVD-2022-73492)

Htmly is a PHP-based blogging platform. version 2.8.1 of Htmly is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary web script HTML via a specially crafted payload in the blog post content field...

CVE-2022-25022

A cross-site scripting XSS vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post...

HTMLy 跨站脚本漏洞

Htmly is a PHP-based blogging platform. version 2.8.1 of Htmly is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary web script HTML via a specially crafted payload in the blog post content field...

PT-2022-17054

Name of the Vulnerable Software and Affected Versions Htmly version 2.8.1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts via a crafted payload in the content field of a blog post. This enables the execution of malicious HTML code. Recommendations Fo...

WordPress Page/Post Content Shortcode plugin authorization issue vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Page/Post Content Shortcode plugin in and prior versions is vulnerable to an authorization...

PT-2021-24040

Name of the Vulnerable Software and Affected Versions: Anchor CMS versions prior to 0.12.7 Description: A Cross Site Scripting XSS issue exists, allowing attackers to upload malicious code in the title and content of posts to obtain administrator cookies and perform other malicious operations...

PT-2021-16311

Name of the Vulnerable Software and Affected Versions: Page/Post Content Shortcode WordPress plugin version 1.0 Description: The issue allows users with a role as low as contributor to access draft, private, password protected, and trashed posts and pages they should not be allowed to, including...

CVE-2021-24819: Incorrect Authorization

The Page/Post Content Shortcode WordPress plugin through 1.0 does not have proper authorisation in place, allowing users with a role as low as contributor to access draft/private/password protected/trashed posts/pages they should not be allowed to, including posts created by other users such as...

CVE-2021-24629

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

CVE-2021-24629

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

CVE-2021-24629 Post Content XMLRPC <= 1.0 - Admin+ SQL Injections

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Post Content XMLRPC plugin, which stems from the plugin'...

PT-2021-16145

Name of the Vulnerable Software and Affected Versions Post Content XMLRPC WordPress plugin version 1.0 Description The issue concerns an authenticated SQL injection. It occurs because the plugin does not properly sanitise or escape multiple GET and POST parameters, such as username and password,...

CVE-2021-24629: Improper Neutralization of Special Elements used in an SQL Command

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

ED01-CMS cross-site scripting vulnerability

ED01-CMS is a content management system. A cross-site scripting vulnerability exists in the sposts.php component of ED01-CMS 1.0, which can be exploited by attackers to execute arbitrary web scripts or HTML by inserting specially crafted loads into the Post title or Post content fields...

CVE-2020-18259: Improper Neutralization of Input During Web Page Generation

ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting XSS vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields...

PT-2021-10161

Name of the Vulnerable Software and Affected Versions: ED01-CMS version 1.0 Description: The issue is a reflective cross-site scripting XSS vulnerability in the sposts.php component. This allows attackers to execute arbitrary web scripts or HTML by inserting a crafted payload into the Post title ...