Lucene search
+L

16 matches found

RedhatCVE
RedhatCVE
•added 2025/10/28 10:59 p.m.•25 views

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

7.2CVSS4.7AI score0.00389EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 10:59 p.m.•32 views

CVE-2025-12330

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS3.1AI score0.00273EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/28 12:31 a.m.•16 views

EUVD-2025-36375

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

5.8CVSS4.6AI score0.00389EPSS
SaveExploits1References6
NVD
NVD
•added 2025/10/27 10:15 p.m.•24 views

CVE-2025-12330

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS0.00273EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 10:15 p.m.•17 views

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

7.2CVSS0.00389EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/27 10:02 p.m.•32 views

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

5.8CVSS0.00389EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/27 10:02 p.m.•10 views

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

5.8CVSS5.1AI score0.00389EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/27 10:02 p.m.•14 views

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

5.1CVSS5.6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/10/27 10:02 p.m.•6 views

CVE-2025-12330 Willow CMS Add Post add cross site scripting

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS3.6AI score0.00273EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/27 10:02 p.m.•13 views

CVE-2025-12330 Willow CMS Add Post add cross site scripting

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS4.2AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/10/27 10:02 p.m.•24 views

CVE-2025-12330 Willow CMS Add Post add cross site scripting

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS0.00273EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•20 views

PT-2025-44058

Name of the Vulnerable Software and Affected Versions Willow CMS versions prior to 1.4.1 Description A flaw exists in Willow CMS that allows for unrestricted file uploads. This issue is present in a file located at /admin/images/add and involves an unknown function. Remote attackers can exploit...

5.8CVSS5.1AI score0.00389EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•14 views

Willow CMS 代码注入漏洞

Willow CMS is a content management system by mndeaves individual developers. A code injection vulnerability exists in Willow CMS 1.4.0 and earlier versions, which stems from an incorrect manipulation of the parameters title/body in the file /admin/articles/add, which could lead to a cross-site...

4.8CVSS4.1AI score0.00273EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•3 views

CVE-2025-12330: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS3.8AI score0.00273EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•18 views

PT-2025-44057

Name of the Vulnerable Software and Affected Versions Willow CMS versions prior to 1.4.1 Description A security flaw exists in Willow CMS that allows for cross site scripting. The issue is related to the processing of the file '/admin/articles/add' within the Add Post Page component. Manipulation...

4.8CVSS2.9AI score0.00273EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•3 views

CVE-2025-12331: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

7.2CVSS5.2AI score0.00389EPSS
SaveExploits1References1
Rows per page
Query Builder