9 matches found
EUVD-2025-23281
Malicious code in bioql PyPI...
CVE-2025-50270
A stored Cross Site Scripting xss vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters...
CVE-2025-50270
A stored Cross Site Scripting xss vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters...
CVE-2025-50270
A stored Cross Site Scripting xss vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters...
CVE-2025-50270
AnQiCMS version v.3.4.11 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability within its "content management" feature. The root cause is the improper neutralization of input during web page generation, specifically failing to validate or escape data provided in the title, categoryTi...
PT-2025-31527 · Anqicms · Anqicms
Name of the Vulnerable Software and Affected Versions: AnQiCMS version 3.4.11 Description: A stored Cross Site Scripting xss vulnerability exists in the "content management" feature. A remote attacker can execute arbitrary code by providing a crafted script to the title, categoryTitle, and tmpTag...
CVE-2025-50270
A stored Cross Site Scripting xss vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters...
CVE-2025-50270
A stored Cross Site Scripting xss vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters...
CVE-2025-50270: Improper Neutralization of Input During Web Page Generation
A stored Cross Site Scripting xss vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters...