CVE-2024-22559

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

CVE-2024-22559: Improper Neutralization of Input During Web Page Generation

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

Jianhua Sun LightCMS Cross-Site Scripting Vulnerability

Jianhua Sun LightCMS is Jianhua Sun open source an application . Provides a lightweight CMS system , can also be used as a general-purpose back-end management framework . Jianhua Sun LightCMS v2.0 version of a cross-site scripting vulnerability , the vulnerability stems from the Management -...

PT-2024-19485 · Lightcms · Lightcms

Name of the Vulnerable Software and Affected Versions: LightCMS version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Content Management - Articles field. Recommendations: For version 2.0, update to a newer version that contains a fix for this issue, if available. If no...

CVE-2024-22559

CVE-2024-22559 affects LightCMS v2.0 with a Cross Site Scripting (XSS) vulnerability in the Content Management – Articles field. The CVSSv3.1 base score is 5.4 (Medium) with Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: Required, Scope: Changed, and imp...

CVE-2024-22559

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

GetSimple CMS 跨站脚本漏洞

GetSimple CMS is a content management system CMS written in PHP. A cross-site scripting vulnerability exists in GetSimple CMS version 3.3.16, which stems from the lack of effective filtering and escaping of user-supplied data when adding articles to the /admin/edit.php page, and can be exploited ...

The top 10 AI security articles you must read in 2024

We've curated a collection of 10 AI security articles that cover novel threats to AI models as well as strategies for developers to safeguard their models...

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

PT-2023-32666 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: A vulnerability has been found in IceCMS, affecting an unknown function of the file /WebArticle/articles/ of the component Like Handler. This issue leads to improper enforcement of a single, unique action and...

WordPress WP Native Articles - Instant Articles Plugin for WordPress Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software WP Native Articles - Instant Articles Plugin for WordPress Type Plugin Vulnerable versions = 1.1.6 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0bfd870f25d7...

leeya_bug

leeyabug This is my 0day verif...

CVE-2023-33780

A stored cross-site scripting XSS vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the body of news article...

May 23, 2023-KB5026958 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

The Veeam KB Resource Hub

Top 10 Most Popular KBs for Q2 2026 1. KB1832: How to Collect Logs for Veeam Backup & Replication 2. KB1999: Antivirus Exclusions for Veeam Backup & Replication 3. KB4816: How to Configure File Version Protection 4. KB2404: How to Collect Logs for Veeam Agent for Microsoft Windows 5. KB1471: How ...

Improper access control

Zammad 5.3.x Fixed in 5.4.0 is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions...

CVE-2023-29868

Zammad 5.3.x Fixed in 5.4.0 is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions...

Zammad 安全漏洞

Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in Zammad version 5.3.x. The vulnerability stems from vulnerability to faulty access control, where an authenticated attacker with agent and client roles can make unauthorized changes t...

CVE-2023-29638

Cross Site Scripting XSS vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles...

Cross site scripting

Cross Site Scripting XSS vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles...