CVE-2026-27503: Improper Neutralization of Input During Web Page Generation

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value directly into an HTML input value attribute,...

CVE-2020-18191

GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...

PT-2020-15096

Name of the Vulnerable Software and Affected Versions GetSimpleCMS version 3.3.15 Description The issue allows remote attackers to delete arbitrary files. This is achieved through a directory traversal attack. The "/admin/log.php" API endpoint is involved in the exploitation. Recommendations For...