PT-2021-10894

Name of the Vulnerable Software and Affected Versions noneCMS version 1.3.0 Description A cross-site scripting XSS issue allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter in the admin/article/add.html page. Recommendations For noneCMS version 1.3....

CVE-2020-23374: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter...