CVE-2022-1812

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10...

BIT-PUBLIFY-2022-0578

Code Injection in GitHub repository publify/publify prior to 9.2.8...

CVE-2023-0569 Weak Password Requirements in publify/publify

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

Cross-site Scripting (XSS)

publify is vulnerable to stored cross-site scripting attacks. The vulnerability exists in the resourceuploader.rb due to lack of input validation which allows an attacker to inject and execute arbitrary javascript...

Publify 跨站脚本漏洞

Publify is a simple but full-featured web publishing software. A security vulnerability exists in Publify versions v8.0 through v9.2.4, which can be exploited by attackers to inject malicious JavaScript via an uploaded html file...