Fluent CMS Cross Site Scripting / Article Deletion

Fluent CMS suffers from cross site scripting and article deletion vulnerabilities. Exploit Title: Fluent-CMS Unauthenticated Stored XSS & Article Deletion Date: 2026-08-22 Exploit Author: Chokri Hammedi Software: https://github.com/nexgen999/Fluent-CMS Vendor: https://github.com/nexgen999 Version...

CVE-2018-10248

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content=content=recycledelete...

CVE-2020-10488

CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request...

CVE-2020-10485

CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request...

CVE-2026-21429 Emlog has Broken Access Control (BAC)

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available...

EUVD-2019-18437

Malware in sbrugna...

EUVD-2020-10122

Malware in sbrugna...

EUVD-2019-18291

Malware in sbrugna...

EUVD-2018-2322

Malware in sbrugna...

EUVD-2018-2828

Malware in sbrugna...

EUVD-2019-18974

Malware in sbrugna...

EUVD-2018-4542

Malware in sbrugna...

EUVD-1999-0911

Malware in sbrugna...

EUVD-2019-17267

Malware in sbrugna...

EUVD-2020-2938

Malware in sbrugna...

EUVD-2020-2941

Malware in sbrugna...

EUVD-2025-14828

Malicious code in bioql PyPI...

EUVD-2021-28580

Malicious code in bioql PyPI...

CVE-2025-54541

QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article. The vendor was notified early about this vulnerability, but didn't respon...

CVE-2025-54541 Cross-Site Request Forgery in QuickCMS

QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article. The vendor was notified early about this vulnerability, but didn't respon...