EUVD-2018-7704

Malware in sbrugna...

CVE-2018-15847

An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...

Cross site scripting

An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...

CVE-2018-15847

CVE-2018-15847 affects puppyCMS 5.1: an XSS vulnerability exists in menu.php via the "Add Page/URL" field. The issue allows injection of JavaScript through that link field, as described by multiple sources (NVD/CNVD). CVSS metrics indicate a MEDIUM severity risk (base score 6.1/3.0; network attac...

PT-2018-13236

Name of the Vulnerable Software and Affected Versions puppyCMS version 5.1 Description An issue was discovered in the software, where there is a potential for XSS via the menu.php file in the "Add Page/URL" URL link field. Recommendations For puppyCMS version 5.1, consider restricting access to t...

CVE-2018-15847: Improper Neutralization of Input During Web Page Generation

An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...