Cross site scripting

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2020-20584

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2020-20584

Baigo CMS v4.0-beta-1 contains a Cross-Site Scripting (XSS) vulnerability that can be triggered by the post parameter to /public/console/profile/info-submit/. Multiple sources confirm the issue and describe the impact as arbitrary web script or HTML execution. The PT-2021-10508 entry notes the vu...

PT-2021-10508

Name of the Vulnerable Software and Affected Versions: baigo CMS version 4.0-beta-1 Description: A cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via the post parameter to the "/public/console/profile/info-submit/" API endpoint. Recommendations: For baigo CMS...

baigo CMS 跨站脚本漏洞

baigo CMS is an open source PHP-based web content management system CMS. baigo CMS v4.0 contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web script or HTML by submitting form parameters to a public console configuration file...

baigo CMS Cross-Site Scripting Vulnerability

baigo CMS is a PHP-based open source web content management system. A cross-site scripting vulnerability exists in baigo CMS 2.1.1. A remote attacker can use this vulnerability to inject arbitrary Web script or HTML via the optbaseBGSITENAME parameter of the bgconsole/index.php?m=opt&c=request UR...

baigo CMS Arbitrary Code Execution Vulnerability

baigo CMS is a PHP-based open source web content management system. An arbitrary code execution vulnerability exists in baigo CMS 2.1.1. The vulnerability stems from the BGSITENAME parameter with malicious code that can be written to the optbase.inc.php file. A remote attacker can exploit this...

CVE-2019-9227

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BGSITENAME parameter with malicious code can be written into the optbase.inc.php file...

CVE-2019-9227

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BGSITENAME parameter with malicious code can be written into the optbase.inc.php file...

Code injection

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BGSITENAME parameter with malicious code can be written into the optbase.inc.php file...

CVE-2019-9226

An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the optbaseBGSITENAME parameter to the bgconsole/index.php?m=opt&c=request URI...

Cross site scripting

An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the optbaseBGSITENAME parameter to the bgconsole/index.php?m=opt&c=request URI...

CVE-2019-9226

An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the optbaseBGSITENAME parameter to the bgconsole/index.php?m=opt&c=request URI...

CVE-2019-9226

CVE-2019-9226 affects baigo CMS 2.1.1 with a persistent XSS in the bg_console/index.php?m=opt&c=request URI, exploitable via the opt[base][BG_SITE_NAME] parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Documented impact is user-visible script injection;...

CVE-2019-9227

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BGSITENAME parameter with malicious code can be written into the optbase.inc.php file...

CVE-2019-9226

An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the optbaseBGSITENAME parameter to the bgconsole/index.php?m=opt&c=request URI...

CVE-2019-9227

CVE-2019-9227 affects baigo CMS 2.1.1 and enables remote code execution. The vulnerability stems from a BG_SITE_NAME parameter that can contain malicious code, which can be written into the opt_base.inc.php file. This leads to arbitrary code execution with remote access. Exploitation details are ...

Code execution vulnerability in baigo CMS v2.1.1 backend

baigo CMS is a PHP-based open source content management system. A code execution vulnerability exists in the backend of baigo CMS v2.1.1, which can be exploited by an attacker to gain control of the web server...

baigo CMS Cross-Site Request Forgery Vulnerability

baigo CMS is an open source PHP-based content management system CMS. A cross-site request forgery vulnerability exists in the index.php?m=article&c=request page in baigo CMS version 2.1.1, which can be exploited by remote attackers to publish arbitrary articles...

CVE-2018-16458

An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article...