CVE-2018-19465

Maccms through 8.0 allows XSS via the sitekeywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/systemconfig.html, related to template/paody/html/vodindex.html...

CVE-2018-19465

Maccms through 8.0 allows XSS via the sitekeywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/systemconfig.html, related to template/paody/html/vodindex.html...

CVE-2018-19465

Maccms through 8.0 allows XSS via the sitekeywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/systemconfig.html, related to template/paody/html/vodindex.html...

PT-2019-9825

Name of the Vulnerable Software and Affected Versions Maccms versions through 8.0 Description The issue allows for XSS via the site keywords field to "index.php?m=system-config" because of vulnerabilities in tpl/module/system.php and tpl/html/system config.html, related to template/paody/html/vod...

Cross site scripting

An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page...

PT-2018-12775

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.5 Description An issue exists where XSS is possible via the Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page. Recommendations For WeaselCMS version 0.3.5, update to a version that fixes...

CVE-2018-14877: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page...

WeaselCMS Cross-Site Scripting Vulnerability

WeaselCMS is a lightweight content management system CMS written in PHP. A cross-site scripting vulnerability exists in WeaselCMS version 0.3.5. A remote attacker can exploit this vulnerability to execute JavaScript code via the Site Language, Site Title, Site Description, and Site Keywords field...

CVE-2018-14877

An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page...

CVE-2015-4396

Multiple cross-site request forgery CSRF vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that 1 create, 2 delete, or 3 set priorities to...

CVE-2015-4396: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that 1 create, 2 delete, or 3 set priorities to...