EUVD-2021-12013

Malware in sbrugna...

Cross-site Scripting (XSS) - Stored in admidio/admidio

Description When adding a menu after logging in with an administrator account, there is no verification of the URL value, so the XSS payload is stored in the DB. After that, when you click the saved menu, XSS is triggered. If an administrator adds a menu, normal users can click it too. Proof of...

CVE-2019-7566

CSZ CMS 1.1.8 has CSRF via admin/users/new/add...