EUVD-2019-17822

Malware in sbrugna...

EUVD-2019-17824

Malware in sbrugna...

Code injection

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8434

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8432

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter...

CVE-2019-8434

In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter...

CVE-2019-8432

CmsEasy 7.0 is affected by a cross-site scripting (XSS) vulnerability in the ckplayer.php URL parameter. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) as an XSS in CmsEasy 7.0 via ckplayer.php, but no further technical specifics (such as exact code path, exploit detail...

CVE-2019-8434

In CmsEasy 7.0, CVE-2019-8434 describes a cross-site scripting (XSS) vulnerability triggered by the ckplayer.php autoplay parameter. The vulnerability targets the web application component handling that parameter and can lead to script execution in a victim’s browser. Metrics indicate a network-a...