54280 matches found
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-62369: Improper Control of Generation of Code
Xibo is an open source digital signage platform with a web content management system CMS. Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "System - Add/Edit custom modules and...
TencentOS Server 4: edk2 (TSSA-2025:0850)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593: Improper Neutralization of Input During Web Page Generation
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
CVE-2025-63593
Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting XSS...
PT-2025-44792
Name of the Vulnerable Software and Affected Versions Grav CMS version 1.7.49.5 Description Grav CMS version 1.7.49.5 is susceptible to Cross Site Scripting XSS. This allows for the injection of malicious scripts into web pages viewed by other users. Recommendations At the moment, there is no...
CVE-2025-63593
Grav CMS version 1.7.49.5 is vulnerable to Cross-Site Scripting (XSS) due to a lack of effective filtering and escaping of user-supplied data. An attacker can exploit this by injecting a crafted payload via exposed input parameters to execute arbitrary JavaScript or HTML in the context of a user'...
Malicious code in fec-cms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74bf7ef4160cbd326cf0897bab905bbc059392581da57f6b10e99471e5c60c7 The package fec-cms was found to contain malicious code. Source: ossf-package-analysis 110aae9d904f5e4469a068418b8fe0f1fdf2094e4945829b8793584539f2a9...
MAL-2025-49313 Malicious code in fec-cms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74bf7ef4160cbd326cf0897bab905bbc059392581da57f6b10e99471e5c60c7 The package fec-cms was found to contain malicious code. Source: ossf-package-analysis 110aae9d904f5e4469a068418b8fe0f1fdf2094e4945829b8793584539f2a9...
CVE-2025-63608
A SQL injection vulnerability exists in CSZ-CMS =1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries...
CVE-2025-64112 Statmatic vulnerable to Stored Cross-Site Scripting
Statmatic is a Laravel and Git powered content management system CMS. Stored XSS vulnerabilities in Collections and Taxonomies allow authenticated users with content creation permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This vulnerability is fix...
Malicious code in epic-node-cms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd297874ba205aaf4c97faaf4912461c0dff63b90c1504a72fd8f692845da2e8 The package epic-node-cms was found to contain malicious code...
EUVD-2025-37125
Malicious code in epic-node-cms npm...
MAL-2025-49168 Malicious code in epic-node-cms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd297874ba205aaf4c97faaf4912461c0dff63b90c1504a72fd8f692845da2e8 The package epic-node-cms was found to contain malicious code...
CVE-2025-63608
A SQL injection vulnerability exists in CSZ-CMS =1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries...
CVE-2025-60898
An unauthenticated server-side request forgery SSRF vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a remote attacker to cause the server to issue HTTP requests to attacker-controlled URLs, including internal addresses. The endpoint performs a server-side GET to a...
CVE-2025-63608
A SQL injection vulnerability exists in CSZ-CMS =1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries...
📄 WBCE CMS 1.6.4 Cross Site Scripting
WBCE CMS version 1.6.4 suffers from a persistent cross site scripting vulnerability. Exploit Title: WBCE CMS 1.6.4 - Stored Cross-Site Scripting XSS Date: 2025-10-29 Exploit Author: Chokri Hammedi Vendor Homepage: https://wbce.org/ Software Link: https://github.com/WBCE/WBCECMS/releases/tag/v1.6....