347 matches found
Cross site scripting
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via /admin/users/save.php...
CVE-2022-30072
WBCE CMS 1.5.2 is vulnerable to Cross-Site Scripting (XSS) via the admin/pages/sections_save.php namesection2 parameter. Root cause is unvalidated input leading to script injection. No exploitation details or patch information are provided in the connected documents. Impact is described as XSS; r...
CVE-2022-30072
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via \admin\pages\sectionssave.php namesection2 parameters...
CVE-2022-30072
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via \admin\pages\sectionssave.php namesection2 parameters...
CVE-2022-30073
WBCE CMS 1.5.2 contains a stored Cross‑Site Scripting (XSS) vulnerability in the Display Name parameter of /admin\Users\save.php. The Nuclei template confirms the flaw as stored XSS with practical impact information: injection of malicious scripts into pages viewed by other users, potentially ena...
CVE-2022-30073
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via /admin/users/save.php...
CVE-2022-30073
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via /admin/users/save.php...
WBCE CMS 跨站脚本漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting XSS attacks via /admin/users/save.php...
WBCE CMS 跨站脚本漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited to cause a cross-site scripting XSS attack via the \admin\pages\sectionssave.php namesection2 parameter...
WBCE CMS Cross-Site Scripting Vulnerability
WBCE CMS is a WBCB CMS forum that converts HTML to WBCB CMS templates.A cross-site scripting vulnerability exists in WBCE CMS version 1.5.2, which can be exploited by attackers to execute malicious code, tamper with pages to perform phishing attacks, and trick users into logging in again and then...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
Cross site scripting
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-28477
CVE-2022-28477 affects WBCE CMS 1.5.2 and is described as a Cross Site Scripting (XSS) vulnerability. The connected sources indicate that an attacker could execute malicious code, tamper with pages to perform phishing, and trick users into revealing credentials; however, explicit root-cause detai...
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-25099
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25099
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...