CVE-2020-24872: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitrary code...

PT-2023-11733

Name of the Vulnerable Software and Affected Versions Lepton-CMS version 4.7.0 Description The issue is a Cross Site Scripting XSS vulnerability in the backend/pages/modify.php file, which allows remote attackers to execute arbitrary code. This can be exploited by attackers to inject malicious...

CVE-2018-16635

Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php...

PT-2018-13662

Name of the Vulnerable Software and Affected Versions Blackcat CMS version 1.3.2 Description The issue allows for XSS via the page title at backend/pages/modify.php, specifically when accessing the willkommen.php?lang=DE page. Recommendations For Blackcat CMS version 1.3.2, update the modify.php...

CVE-2018-16635: Improper Neutralization of Input During Web Page Generation

Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php...

CVE-2018-10821

Cross-site scripting XSS vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel...

PT-2018-10127

Name of the Vulnerable Software and Affected Versions BlackCatCMS version 1.3 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel in backend/pages/modify.php. Recommendations For...

CVE-2018-10821: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel...