2 matches found
Cross-site Scripting (XSS)
Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the relid parameter in the /admin/category/create endpoint. An attacker can execute arbitrary JavaScript code in the context of an...
6.1CVSS5.5AI score0.00271EPSS
SaveExploits1References2
PT-2024-39034 · Unknown · Job Portal
Name of the Vulnerable Software and Affected Versions: Job Portal versions affected versions not specified Description: The issue is related to a SQL injection vulnerability. An attacker could send a specially designed query through the id parameter in the "/jobportal/admin/category/index.php"...
9.8CVSS7.2AI score0.00464EPSS
SaveExploits0References11
20