Lucene search
+L

29 matches found

Veracode
Veracode
added 2024/03/22 8:33 a.m.15 views

File Validation Bypass

ezsystems/ezplatform-kernel is vulnerable to File Validation Bypass. The vulnerability is due to improper file validation, which allows an attacker to save article content even if its rejected during validation...

7AI score
SaveExploits0
Prion
Prion
added 2024/01/17 6:15 p.m.19 views

Cross site scripting

Stupid Simple CMS =1.2.4 is vulnerable to Cross Site Scripting XSS in the editing section of the article content...

5.8CVSS6.2AI score0.00376EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2023/07/31 2:15 p.m.30 views

CVE-2020-21881

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

6.5CVSS6.6AI score0.0034EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/07/31 12:00 a.m.12 views

DuxCMS 跨站请求伪造漏洞

DuxCMS is an open source content management system. A cross-site request forgery vulnerability exists in DuxCMS version 2.1, which originates from admin.php that allows remote attackers to modify application data via article/admin/content/add...

6.5CVSS6.4AI score0.0034EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/05/19 1:15 p.m.8 views

CVE-2023-31862

jizhicms v2.4.6 is vulnerable to Cross Site Scripting XSS. The content of the article published in the front end is only filtered in the front end, without being filtered in the background, which allows attackers to publish an article containing malicious JavaScript scripts by modifying the reque...

5.4CVSS5.8AI score0.00343EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/05/19 12:00 a.m.9 views

CVE-2023-31862

jizhicms v2.4.6 is vulnerable to Cross Site Scripting XSS. The content of the article published in the front end is only filtered in the front end, without being filtered in the background, which allows attackers to publish an article containing malicious JavaScript scripts by modifying the reque...

6.4AI score0.00343EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:36 a.m.14 views

SUSE CVE-2013-4138

Cross-site scripting XSS vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors...

2.1CVSS5.8AI score0.00931EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/12/28 12:00 a.m.12 views

Pomash 跨站脚本漏洞

Pomash is a lightweight blogging system by the individual developer of JmPotato. Pomash suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameters article.title/content.title/article.tag leading to cross-site scripting...

6.1CVSS4.2AI score0.00466EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/08/12 11:15 p.m.8 views

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

4.8CVSS6.1AI score0.00755EPSS
SaveExploits1References3
Rows per page
Query Builder