CVE-2022-34121

Cuppa CMS v1.0 is vulnerable to a local file inclusion (LFI) through the component /templates/default/html/windows/right.php . The issue, described across sources, enables unauthorized access and disclosure of sensitive information, with potential remote code execution implied by some references....

CVE-2022-31181

creationtimestamp| type| source ---|---|--- 2022-07-26 06:00:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2777 2022-07-28 07:16:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2788 2022-08-02 00:17:27+00:00| seen| https://t.me/cibsecurity/47383 2025-10-10...

CVE-2021-40149

creationtimestamp| type| source ---|---|--- 2022-07-26 04:30:44+00:00| seen| https://t.me/cibsecurity/46408 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40149.yaml 2026-09-01 20:01:37+00:00| seen|...

GHSA-XQCF-HJ92-967M Django REST framework XSS Vulnerability

Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...

Django REST framework XSS Vulnerability

Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...

CVE-2018-25045

Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...

UBUNTU-CVE-2018-25045

Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...

CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

Cross site scripting

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

CVE-2022-36131

The CVE-2022-36131 entry concerns the Better PDF Exporter add-on for Atlassian Jira (version 10.0.0). Affected component: PDF Templates overview page description storage. Root cause: stored cross-site scripting (XSS) via a crafted description can be injected and rendered. Reported impact indicate...

CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

Remote Code Execution (RCE)

winter/storm is vulnerable to Remote Code Execution. An authenticated attacker with permission to to create or modify theme templates with the cms editor can disable the cms.enableSafeMode feature, allowing for the modification of the backend.php code through the web interface...

CVE-2022-28666

creationtimestamp| type| source ---|---|--- 2022-07-21 20:18:24+00:00| seen| https://t.me/cibsecurity/46763 2025-11-29 20:35:02+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2022-28666.yaml 2025-12-01 21:02:33+00:00| seen|...

Remote Code Execution (RCE)

winter/storm is vulnerable to Remote Code Execution. An authenticated attacker with permission to create or modify theme templates with the cms editor can disable the cms.enableSafeMode feature, allowing for the modification of the backend php code through the web interface...

CVE-2022-2168

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:41+00:00| seen| https://t.me/cibsecurity/46384 2025-04-06 08:48:29+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2168.yaml...

[SECURITY] Fedora 35 Update: kiln-0.3.1-3.fc35

A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...

CVE-2022-31161

creationtimestamp| type| source ---|---|--- 2022-07-16 00:20:39+00:00| seen| https://t.me/cibsecurity/46374 2025-05-20 07:32:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-31161.yaml 2025-05-23 21:02:22+00:00| seen|...

Atlassian Jira 8.14.x < 8.20.3 Template Injection

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.15 or 8.14.x prior to 8.20.3. It is, therefore, affected by a vulnerability allowing remote attackers with administrator permissions to execute arbitrary code via Templat...

Atlassian Jira < 8.13.15 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.15 or 8.14.x prior to 8.20.3. It is, therefore, affected by multiple vulnerabilities: - A template injection leading to remote code execution in the Email Templates featu...