CVE-2020-18410

A stored cross site scripting XSS vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 that allows attackers to obtain administrator privileges...

CVE-2020-18410

A stored cross site scripting XSS vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 that allows attackers to obtain administrator privileges...

CVE-2020-18410

CVE-2020-18410 is a stored XSS in Chaoji CMS v2.18, at /index.php?admin-master-article-edit, capable of allowing an attacker to obtain administrator privileges. Affected component: Chaoji CMS 2.18 (endpoint: /index.php?admin-master-article-edit). Underlying cause and impact are described in multi...

CVE-2020-18414

CVE-2020-18414 affects Chaoji CMS v2.18 with a Stored XSS vulnerability exposed at /index.php?admin-master-webset. The root cause is a stored XSS condition that allows an attacker to execute arbitrary code and potentially take actions through the web interface. Connected documents confirm the aff...

CVE-2020-18413

Stored cross site scripting XSS vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code...

Super cms cross-site scripting vulnerability

Chaojicms is a super Cms website management system. Chaoji CMS version 2.39 is vulnerable to a cross-site scripting vulnerability that allows attackers to execute arbitrary scripts via the getClientIp function in "/lib/tinwin.class.php"...

CVE-2020-19962

A stored cross-site scripting XSS vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts...

CVE-2020-19962

A stored cross-site scripting XSS vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts...

CVE-2020-19962

A stored cross-site scripting XSS vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts...

CVE-2020-19962

CVE-2020-19962: A stored XSS in the getClientIp function of /lib/tinwin.class.php in Chaoji CMS 2.39. The vulnerability allows attackers to execute arbitrary web scripts. Severity rated MEDIUM (CVSSv3.1 5.4; Cvss2 3.5). No exploitation details or fixes are provided in the connected documents. No ...