CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CVE-2021-3224: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source content management system. A stored cross-site scripting vulnerability exists in /admin/pages/new in CSZ CMS 1.2.9. An attacker can exploit this vulnerability via the content parameter to conduct a cross-site scripting attack...

PT-2021-19679

Name of the Vulnerable Software and Affected Versions: cszcms version 1.2.9 Description: A stored cross-site scripting XSS issue exists in the /admin/pages/new "API Endpoint" via the content parameter. This allows for malicious script execution. Recommendations: For cszcms version 1.2.9, as a...

CVE-2018-16772

CVE-2018-16772 affects Hoosk v1.7.0. The vulnerability is a cross-site scripting (XSS) issue exploitable via the Navigation Title when creating a new page at admin/pages/new. The attack vector is user-facing via the web interface, with the underlying cause described as a navigation title handling...

PT-2018-13736

Name of the Vulnerable Software and Affected Versions Hoosk version 1.7.0 Description The issue allows for XSS via the Navigation Title of a new page entered at "admin/pages/new". Recommendations For Hoosk version 1.7.0, avoid using the Navigation Title field in the "admin/pages/new" endpoint unt...

CVE-2018-16772: Improper Neutralization of Input During Web Page Generation

Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...

CVE-2012-1901: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to 1 hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or 2 hijack the authentication of administrators for requests...

PT-2012-3639

Name of the Vulnerable Software and Affected Versions FlexCMS versions 3.2.1 and earlier Description The issue allows remote attackers to hijack user authentication for requests that change account settings via a request to "index.php/profile-edit-save" or hijack administrator authentication for...

FlexCMS 3.2.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...