Lucene search
K

26 matches found

ATTACKERKB
ATTACKERKB
added 2022/04/08 9:15 a.m.4 views

CVE-2022-27062

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field...

4.8CVSS6.1AI score0.00675EPSS
Exploits3References4
Prion
Prion
added 2022/04/08 9:15 a.m.14 views

Cross site scripting

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field...

3.5CVSS5AI score0.00675EPSS
Exploits3References3Affected Software1
Prion
Prion
added 2022/04/08 9:15 a.m.9 views

Cross site scripting

Social Codia SMS v1 was discovered to contain a stored cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field...

3.5CVSS5AI score0.00675EPSS
Exploits3References3Affected Software1
CVE
CVE
added 2022/04/08 8:23 a.m.70 views

CVE-2022-27348

CVE-2022-27348 affects Social Codia SMS v1 (inventory management system). The connected documents confirm a stored cross-site scripting (XSS) vulnerability in add_post.php, where an attacker can inject a crafted payload into the Post Title text field to execute arbitrary web scripts/HTML. Root ca...

4.8CVSS5AI score0.00675EPSS
Exploits3References3Affected Software1
CVE
CVE
added 2022/04/08 8:23 a.m.86 views

CVE-2022-27062

CVE-2022-27062 affects AeroCMS v0.0.1. The vulnerability is a stored cross-site scripting (XSS) in the Post Title field exposed via add_post.php, allowing an attacker to inject a crafted payload that executes arbitrary web scripts/HTML when rendered by the browser. The available sources consisten...

4.8CVSS5.2AI score0.00675EPSS
Exploits3References3Affected Software1
Cvelist
Cvelist
added 2022/04/08 8:23 a.m.17 views

CVE-2022-27062

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field...

5.2AI score0.00675EPSS
Exploits3References3
Rows per page
Query Builder