CVE-2020-15189

SOY CMS 3.0.2 and earlier is affected by Remote Code Execution RCE using Unrestricted File Upload. Cross-Site ScriptingXSS vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused...

SOY CMS Cross-Site Request Forgery Vulnerability

SOY CMS is a content management system CMS. A cross-site request forgery vulnerability exists in the SOY CMS Query Component prior to version 2.0.0.3 and prior versions, which arises from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker...