219 matches found
EUVD-2021-1362
Malware in sbrugna...
EUVD-2022-6603
Malicious code in bioql PyPI...
EUVD-2022-6696
Malicious code in bioql PyPI...
EUVD-2022-1615
Malicious code in bioql PyPI...
EUVD-2022-2755
Malicious code in bioql PyPI...
EUVD-2022-5208
Malicious code in bioql PyPI...
EUVD-2022-2239
Malicious code in bioql PyPI...
EUVD-2022-5277
Malicious code in bioql PyPI...
EUVD-2022-4367
Malicious code in bioql PyPI...
EUVD-2023-2312
Malicious code in bioql PyPI...
CVE-2024-45967
Pagekit 1.0.18 is vulnerable to Cross Site Scripting XSS in index.php/admin/site/widget...
CVE-2023-41005
An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php...
CVE-2022-36573
A cross-site scripting XSS vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Markdown text box under /blog/post/edit...
CVE-2021-44135
pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing...
CVE-2019-19013
A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request...
CVE-2019-16669
The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts...
GHSA-XW32-6422-FRQM Pagekit Cross-site Scripting vulnerability
Pagekit 1.0.18 is vulnerable to Cross Site Scripting XSS in index.php/admin/site/widget...
Cross-site Scripting (XSS)
Overview pagekit/pagekit is a modular and lightweight CMS built with Symfony components and Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the index.php/admin/site/widget endpoint. Details Cross-site scripting or XSS is a code vulnerability that occurs wh...
