CVE-2022-25576

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery CSRF via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts...

CVE-2022-25576

Anchor CMS v0.12.7 is affected by a Cross-Site Request Forgery (CSRF) in the component anchor/routes/posts.php that allows an attacker to arbitrarily delete posts. The root cause, as described across multiple entries (including HGSA/GHSA and CVE references), is a missing/ inadequate CSRF token va...

Anchor 跨站请求伪造漏洞

Anchor is an open source lightweight blogging system. A cross-site request forgery vulnerability exists in Anchor CMS version v0.12.7, which stems from a lack of validation and filtering in the component anchor/routes/posts.php. An attacker can use this vulnerability to arbitrarily delete posts...

Cross-site Scripting in Anchor CMS

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-46253

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-46253

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-46253

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-46253

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-46253

Anchor CMS v0.12.7 contains a cross-site scripting (XSS) vulnerability in the Create Post function that can allow an attacker to execute arbitrary web scripts or HTML in a victim’s browser. The CVE entry CVE-2021-46253 documents this issue with a low-to-medium overall risk depending on context, b...

Anchor 跨站脚本漏洞

Anchor is an open source lightweight blogging system. A cross-site scripting vulnerability exists in Anchor CMS v0.12.7, which allows an attacker to exploit the vulnerability to execute arbitrary web script or HTML...

Cross-site Scripting in Anchor CMS

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

GHSA-7MQ6-CP5M-F4J5 Cross-site Scripting in Anchor CMS

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

Cross site scripting

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

CVE-2021-44116 (Anchor CMS) : The vulnerability is an XSS in Anchor CMS versions ≤ 0.12.7, residing in posts.php. The root cause is improper sanitization/neutralization of input in the posts column, allowing an attacker to inject malicious code via the title/content fields. This can enable an att...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...