Cross site request forgery (csrf)

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/update...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

Cross site scripting

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-48880

A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn...

CSZ CMS 1.3.0 Shell Upload

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Date: 23/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

PyroCMS 3.0.1 Cross Site Scripting

Exploit Title: PyroCMS v3.0.1 - Stored XSS Date: 2023-11-25 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://pyrocms.com/ Version: v3.0.1 Tested on: https://www.softaculous.com/apps/cms/PyroCMS...

Quttera Web Malware Scanner < 3.4.2.1 - Admin+ Path Traversal

Description IThe plugin does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks 1 Go to http://yoursite/wordpress/wp-admin/admin.php?page=qutterawmscannerint 2 Click "Scan Now" 3 Click "Detected Threats" 4 Navigate to some Suspicio...

PT-2023-30910 · Unknown · Statamic Cms

Name of the Vulnerable Software and Affected Versions: Statamic CMS versions prior to 3.4.15 and 4.36.0 Description: The issue allows HTML files crafted to look like images to be uploaded, bypassing mime validation. This is applicable on front-end forms using the "Forms" feature with an assets...

CVE-2023-48020

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/task/changeStatus...

CVE-2023-31754

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...

CVE-2023-31754

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...

CVE-2023-31754

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...

Cross site scripting

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...

CVE-2023-31754

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...

CVE-2023-31754

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...

CVE-2023-31754

Optimizely CMS UI before v12.16.0 is affected by a cross-site scripting (XSS) vulnerability in the Admin panel. The root cause is an XSS issue in the Admin interface, leading to potential script injection. Affected software: Optimizely CMS UI prior to 12.16.0. Impact is described as XSS; specific...

Optimizely CMS Security Vulnerability

Optimizely CMS is a content management system from Optimizely, Inc. A security vulnerability exists in Optimizely CMS versions prior to v12.16.0 that stems from a cross-site scripting XSS vulnerability in the Admin panel...