PHPVibe Cross-Site Scripting Vulnerability

PHPVibe is a free video management system from PHPVibe Inc. A cross-site scripting vulnerability exists in PHPVibe version 11.0.46, which stems from the fact that manipulation of the parameter site-logo-text can lead to cross-site scripting attacks...

PT-2024-37372 · Phpvibe · Phpvibe

Name of the Vulnerable Software and Affected Versions: PHPVibe version 11.0.46 Description: A problematic issue has been found in the Global Options Page component, specifically in the file functionalities.global.php. The manipulation of the site-logo-text argument leads to cross-site scripting...

DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-07940)

DiliCMS is a content management system CMS based on Codelgniter. A cross-site scripting vulnerability exists in the site logo text box in DiliCMS version 2.4.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...