CVE-2022-36224

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-36224

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-36224

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery CSRF...

Cross site request forgery (csrf)

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-36224

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-36224

XunRuiCMS v4.5.6 is reported vulnerable to Cross-Site Request Forgery (CSRF). The CVE entry indicates the affected software (XunRuiCMS 4.5.6) and the CSRF issue, but does not provide technical details such as the exact vulnerable component, attack vector, or root cause in the Initial document. A ...

PT-2022-23266 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: XunRuiCMS version 4.5.6 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For XunRuiCMS version 4.5.6,...

XunRuiCMS Cross-Site Scripting Vulnerability

XunRuiCloud Software Development XunRuiCMS XunRuiCMS is an open source content management system CMS from China XunRuiCloud Software Development Company. A cross-site scripting vulnerability exists in XunRuiCMS version 4.3.1. The vulnerability stems from the lack of proper validation of client-si...

CVE-2019-17074

An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the modulecategory area...

CVE-2019-17074

An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the modulecategory area...

Cross site scripting

An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the modulecategory area...

CVE-2019-17074

An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the modulecategory area...

CVE-2019-17074

The CVE-2019-17074 entry concerns XunRuiCMS 4.3.1, with a stored XSS vulnerability in the module_category area. Multiple connected sources (including Red Hat, CNVD, OSV, NVD, CVE lists) corroborate that the issue is a client-side script injection flaw arising from improper validation of data in t...