829 matches found
CVE-2022-25582
A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...
Cross site scripting
A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...
What’s New for Developers: March 2022
We have some excellent highlights this month. We’re excited to announce new videos, useful articles, an event recap, and much more...
CVE-2022-25582: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...
ClassCMS 跨站脚本漏洞
A cross-site scripting vulnerability exists in ClassCMS v2.5 and prior versions of ClassCMS, a simple, flexible, secure, and easily extensible content management system in China. The vulnerability stems from a lack of user-supplied data and output data validation filtering in the Add Articles fie...
Top 5 DevOps Resource Center Articles of 2021
We look back on the 5 most popular DevOps Resource Center articles in 2021 to help you build at your best in 2022...
Qibosoft Cross-Site Request Forgery Vulnerability (CNVD-2022-02756)
Qibosoft qibosoft is a content management system CMS from Qibosoft China. qibosoft suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to publish malicious articles...
CVE-2020-20943
A Cross-Site Request Forgery CSRF in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL...
Qibosoft qibosoft 跨站请求伪造漏洞
Qibosoft qibosoft is a content management system CMS from Qibosoft China. qibosoft suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to publish malicious articles...
CVE-2020-20943: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL...
Cross-site Scripting (XSS)
Overview publifycore is a Core engine for the Publify blogging system, formerly known as Typo. Affected versions of this package are vulnerable to Cross-site Scripting XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/article. Detail...
Sourcecodester News247 CMS Cross-Site Scripting Vulnerability
Sourcecodester News247 Cms is an open source content management system for managing the distribution of news content or articles in Tanzania. sourcecodester News247 CMS v1.0 has a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side...
CVE-2021-41728
Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...
CVE-2021-41728
CVE-2021-41728 describes a Cross-Site Scripting (XSS) vulnerability in Sourcecodester News247 CMS 1.0, exploitable via the search function in articles. All connected documents consistently identify the affected product as News247 CMS v1.0 and report user-side script execution risk, but do not pro...
CVE-2021-41728: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles...
CVE-2021-41564
Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...
CVE-2021-41564
Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...
Authorization
Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...
CVE-2021-41564 Tad Honor - Improper Authorization
Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete articles arbitrarily without logging in...
