No-CMS Cross-Site Scripting Vulnerability

No-CMS is a free content management system. The system supports authentication and authorization, custom themes and module extensions. A cross-site scripting vulnerability exists in No-CMS version 1.1.3. A remote attacker can use the 'keyword' parameter on the blog/managearticle page to inject...

Cross site scripting

No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...

PT-2018-15152

Name of the Vulnerable Software and Affected Versions No-CMS version 1.1.3 Description The issue allows for Persistent XSS attacks through the keyword parameter in the "blog/manage article" endpoint. Recommendations For No-CMS version 1.1.3, avoid using the keyword parameter in the "blog/manage...

PT-2018-15151

Name of the Vulnerable Software and Affected Versions No-CMS version 1.1.3 Description The issue allows for Persistent XSS attacks through the "article title" parameter in the blog/manage article/index/ endpoint. Recommendations For version 1.1.3, avoid using the article title parameter in the...