2 matches found
CVE-2025-1105: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched...
6.1CVSS3.7AI score0.00394EPSS
SaveExploits0References1
PT-2025-5982
Name of the Vulnerable Software and Affected Versions SiberianCMS version 4.20.6 Description A problem was found in SiberianCMS, affecting some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. This leads to cross-site scripting. The attack...
6.1CVSS4.7AI score0.00394EPSS
SaveExploits0References14
20