Stored XSS in Title

Description Spina's admin screen has an embedded XSS in the title of the page. By embedding arbitrary JavaScript code in the function of Paguri, arbitrary scripts can be executed on the browser when the administrator user who accessed the page deletes the page. Proof of Concept Step 1. Access the...

PT-2023-24885 · Spina · Spina

Name of the Vulnerable Software and Affected Versions: spina versions prior to 2.15.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository spinacms/spina. Recommendations: For versions prior to 2.15.1, update to version 2.15.1 or later to...

spina 跨站脚本漏洞

spina is an easy-to-use CMS from Spina CMS open source. A cross-site scripting vulnerability exists in versions prior to spina 2.15.1, which stems from the presence of a stored cross-site scripting XSS vulnerability...

GHSA-2HXV-MX8X-MCJ9 Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability

Cross-site request forgery CSRF vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75. Spina::ApplicationController actions didn't have CSRF protection. This causes a CSRF vulnerability across the entire engine which includes administrative functionality such as creating...

Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability

Cross-site request forgery CSRF vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75. Spina::ApplicationController actions didn't have CSRF protection. This causes a CSRF vulnerability across the entire engine which includes administrative functionality such as creating...

Spina 'spina/application_controller.rb' Cross-Site Request Forgery Vulnerability

Spina is an open source content management system CMS based on Rails development . The system provides media management , document editing , search engine optimization and other modules . A cross-site request forgery vulnerability exists in previous versions of Spina...

CVE-2015-4619

Cross-site request forgery CSRF vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75...

CVE-2015-4619

Cross-site request forgery CSRF vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75...

CVE-2015-4619

The CVE-2015-4619 entry concerns a Cross-site request forgery (CSRF) vulnerability in Spina prior to commit bfe44f289e336f80b6593032679300c493735e75. The issue arises because Spina::ApplicationController did not enable CSRF protection, creating a CSRF risk across the engine, including administrat...

Spina CMS 'spina/application_controller.rb' Cross-Site Request Forgery Vulnerability

Spina CMS is an open source content management system based on Rails development . Spina CMS suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Cross-site request forgery (CSRF) vulnerability in Spina gem

"Spina::ApplicationController actions didn't have CSRF protection. This causes a CSRF vulnerability across the entire engine which includes administrative functionality such as creating users, changing passwords, and media management."...