CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2025/08/28 12:00 a.m.•5 views

CVE-2025-54540: Improper Neutralization of Input During Web Page Generation

QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. The vendor was notified early about this vulnerability, but didn...

6.1CVSS5.9AI score0.00253EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/08/28 12:00 a.m.•4 views

CVE-2025-55175: Improper Neutralization of Input During Web Page Generation

QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. The vendor was notified early about this vulnerability, but...

6.1CVSS5.9AI score0.00253EPSS

SaveExploits0References1

securityvulns•added 2007/09/24 12:00 a.m.•27 views

GreenSQL SQL firewall crossite scripting

Crossite scripting via admin's panel alerts...

3.1AI score

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by