324 matches found
The vulnerability of the core/admin/profil.php function in the PluXML content management system allows a hacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the core/admin/profil.php function in the PluXML content management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protecte...
PluXML 5.8.7 Cross Site Scripting
Exploit Title: XSS-Stored on PluXML 5.8.7 - latest parameter "idcontent" Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.13.2021 Vendor: https://pluxml.org/ Link: https://sourceforge.net/projects/chikitsa/ CVE: CVE-2021-38603 + Exploit Source: !/usr/bin/python3 Author:...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
Cross site scripting
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
Cross site scripting
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
UBUNTU-CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
UBUNTU-CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...
CVE-2021-38603
Removed by vendor...
CVE-2021-38603
CVE-2021-38603 affects PluXML 5.8.7. The stored XSS vulnerability is in core/admin/profil.php via the Information field (parameter ID: id_content per public exploit). Underlying issue: stored cross-site scripting that could allow an attacker to inject arbitrary script when data is stored in Infor...
CVE-2021-38602
PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...
CVE-2021-38602
CVE-2021-38602 concerns PluXML 5.8.7, where Article Editing via Headline or Content allows stored XSS. The cited description explicitly states a stored XSS in PluXML 5.8.7, and the connected documents reinforce that this is tied to the same vulnerability tracked across multiple sources. The CVE r...