CVE-2020-20347

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...

CVE-2020-20345

Affected software: WTCMS 1.0. Vulnerability: Reflective cross-site scripting (XSS) in the page management backend. Root cause/vector: Attacker-supplied payload in the search box triggers XSS that can expose cookies. Impact: Cookie leakage via crafted input; further exploitation details not provid...

CVE-2020-20345

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

CVE-2020-20345

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module. Connected documents confirm the issue across multiple databases, but do not provide concrete exploit details, affected versions beyond the stated 1.0, or a...

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

CVE-2020-20343

CVE-2020-20343 : WTCMS 1.0 is vulnerable to a cross-site request forgery (CSRF) in the admin navigation add_post path (index.php?g=admin&m=nav&a=add_post). Exploitation would allow an attacker to cause arbitrary article creation in the administrator background. The vulnerability details are descr...

CVE-2020-20343

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...

CVE-2020-20343

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...

CVE-2020-20344: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

PT-2021-10482

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is a stored cross-site scripting XSS vulnerability. It is located in the source field under the article management module. This type of vulnerability allows an attacker to inject malicious scripts into...

PT-2021-10483

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the link field under the background menu management module. Recommendations: For WTCMS version 1.0,...

CVE-2020-20343: Cross-Site Request Forgery (CSRF)

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...

PT-2021-10479

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a cross-site request forgery CSRF vulnerability. This vulnerability is located in the "index.php?g=admin&m=nav&a=add post" component, which allows attackers to arbitrarily add articles in...

CVE-2020-20345: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

CVE-2020-20347: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...

CVE-2020-20349: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

PT-2021-10480

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a reflective cross-site scripting XSS vulnerability. This vulnerability is located in the keyword search function under the background articles module. Recommendations: For WTCMS version...

PT-2021-10484

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the link address field under the background links module. Recommendations: For WTCMS version 1.0, as a...