CVE-2025-25916

wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...

CVE-2024-48356

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...

CVE-2024-48356

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...

CVE-2024-48356: Improper Neutralization of Special Elements used in an SQL Command

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grpdesc parameter of the admin/group.php component...

CVE-2023-46058

Cross Site Scripting XSS vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grpdesc parameter of the admin/group.php component...

CVE-2023-46058: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grpdesc parameter of the admin/group.php component...