167 matches found
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20347
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
CVE-2020-20349
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
CVE-2020-20343
WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...
CVE-2020-20345
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
CVE-2020-20348
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...
Cross site scripting
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
Cross site scripting
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
Cross site scripting
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...
Cross site request forgery (csrf)
WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...
Cross site scripting
WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...
CVE-2020-20349
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
CVE-2020-20349
CVE-2020-20349 affects WTCMS 1.0 and describes a stored cross-site scripting (XSS) vulnerability in the link address field of the background links module. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE records) as a stored XSS in that field; no exploit details or affecte...
CVE-2020-20349
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
CVE-2020-20348
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...
CVE-2020-20348
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...
CVE-2020-20347
Affected software: WTCMS 1.0. Vulnerability type & location: stored cross-site scripting (XSS) in the article management module, in the source field. Root cause (as stated): input is stored and later displayed without proper sanitization. Impact implied by description: script payload could be exe...
CVE-2020-20348
CVE-2020-20348 affects WTCMS 1.0. The vulnerability is a stored cross-site scripting (XSS) in the link field under the background menu management module. Impact is reflected via stored user input; CVSS indicates MEDIUM (3.1) and LOW (2.0) severities depending on metric. No remediation details are...