PT-2021-11853

Name of the Vulnerable Software and Affected Versions: bloofoxCMS version 0.5.2.1 Description: The issue allows remote attackers to execute arbitrary JS/HTML code, which can lead to the execution of malicious scripts on the victim's browser. This is due to a Cross-Site Scripting XSS issue...

CVE-2020-35761: Improper Neutralization of Input During Web Page Generation

bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code...