13 matches found
CVE-2024-42628
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/edit/3...
CVE-2024-42628
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/edit/3...
CVE-2024-42628
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/edit/3...
CVE-2024-42628: Cross-Site Request Forgery (CSRF)
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/edit/3...
CVE-2018-20777
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field...
PT-2019-10220
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a XSS flaw. It can be exploited via the Body field in the admin/?/snippet/edit/1 endpoint. Recommendations: For Frog CMS version 0.9.5, update to a version that includes a fix for th...
CVE-2018-20777: Improper Neutralization of Input During Web Page Generation
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field...
CVE-2018-19844
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319...
PT-2018-12755
Name of the Vulnerable Software and Affected Versions Wolf CMS version 0.8.3.1 Description The issue concerns a problem with the Snippets tab, where there is an XSS issue. This can be demonstrated by accessing the /admin/snippet/edit/1 API endpoint. Recommendations For Wolf CMS version 0.8.3.1,...
CVE-2018-14837: Improper Neutralization of Input During Web Page Generation
Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI...
PT-2018-9824
Name of the Vulnerable Software and Affected Versions: Frog CMS version 0.9.5 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs via the snippetname parameter in the /admin/?/snippet/edit API endpoint. Recommendations: For Frog CMS version 0.9.5, avoid using the...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08555)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...