Lucene search
K

8 matches found

CNNVD
CNNVD
added 2024/07/11 12:0 a.m.2 views

Torchbox Wagtail Security Breach

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Torchbox Wagtail versions 5.2.6, 6.0 through 6.0.5, and 6.1 through 6.1.2, which stems from an error in parsequerystring that causes it to take a long time to process appropriatel...

6.5CVSS6.7AI score0.00329EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.2 views

Torchbox Wagtail Security Breach

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Torchbox Wagtail versions prior to 6.0.5 and prior to 6.1.2, which stems from an improperly applied permission check in the wagtail.contrib.settings module, which can be exploited...

5.5CVSS6.7AI score0.0016EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/19 12:0 a.m.0 views

Torchbox Wagtail Log Information Disclosure Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Wagtail that originates from a user with a Wagtail Administrator Limited Privilege Editor account that can retrieve any user's display name...

2.7CVSS6.7AI score0.00232EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/03 12:0 a.m.3 views

Wagtail 跨站脚本漏洞

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A cross-site scripting vulnerability exists in Wagtail versions 1.5 through 4.1.4, 4.2, and 4.2.1, which originates from a user who creates pages and documents, and then a user with elevated privileges can perform...

6.4CVSS5.6AI score0.01096EPSS
Exploits0References9
CNNVD
CNNVD
added 2021/06/17 12:0 a.m.2 views

Torchbox Wagtail 跨站脚本漏洞

Torchbox Wagtail is an open source content management system CMS from Torchbox, UK. Wagtail suffers from a cross-site scripting vulnerability that stems from tag output not being properly escaped as HTML, which allows users to insert arbitrary HTML or script...

5.4CVSS5.6AI score0.00294EPSS
Exploits1References6
CNVD
CNVD
added 2020/07/21 12:0 a.m.2 views

Torchbox Wagtail Cross-Site Scripting Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A cross-site scripting vulnerability exists in Torchbox Wagtail versions prior to 2.7.4 and prior to 2.9.3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

5.7CVSS6.3AI score0.00595EPSS
Exploits0References1
CNVD
CNVD
added 2020/05/07 12:0 a.m.1 views

Torchbox Wagtail Competitive Conditions Issue Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Torchbox Wagtail versions prior to 2.7.2 and prior to 2.8.2. An attacker could exploit the vulnerability to obtain a shared password used to protect a page or document...

6.1CVSS6.8AI score0.00052EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/15 12:0 a.m.2 views

Torchbox Wagtail Cross-Site Scripting Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A cross-site scripting vulnerability exists in Torchbox Wagtail version 2.8.1 and versions prior to 2.7.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

6.8CVSS6.3AI score0.00356EPSS
Exploits1References1
Rows per page
Query Builder