CVE-2025-50975

The IPFire 2.29 web-based firewall interface, specifically the firewall.cgi component, is vulnerable to a stored cross-site scripting (XSS) flaw. The issue arises because the system fails to properly sanitize several rule parameters, including PROT , SRC_PORT , TGT_PORT , dnatport , key , rulerem...

CVE-2021-20831

Cross-site request forgery CSRF vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack the authentication of administrators and unintended operation may be performed via unspecified vectors...

DBHcms Cross-Site Scripting Vulnerability (CNVD-2020-49087)

DBHcms is a small, free and open source content management system for personal and small business websites. A stored cross-site scripting vulnerability exists in DBHcms 1.2.0. The vulnerability stems from the failure of the htmlspecialchars function for the 'menudescription' variable in...