Lucene search
+L

77 matches found

osv_cve
osv_cve
•added 2022/05/05 9:20 a.m.•32 views

CVE-2022-1590 Bludit New Content Module new-content cross site scripting

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input alert1 leads to cross site scripting. The attack can be initiated remotely...

3.5CVSS3.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/05/05 9:20 a.m.•13 views

CVE-2022-1590 Bludit New Content Module new-content cross site scripting

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input alert1 leads to cross site scripting. The attack can be initiated remotely...

3.5CVSS5.4AI score0.00676EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/05/05 9:20 a.m.•49 views

CVE-2022-1590 Bludit New Content Module new-content cross site scripting

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input alert1 leads to cross site scripting. The attack can be initiated remotely...

3.5CVSS5.4AI score0.00676EPSS
SaveExploits1References2
CVE
CVE
•added 2022/05/05 9:20 a.m.•80 views

CVE-2022-1590

Bludit 3.13.1 is affected by a Cross-Site Scripting vulnerability in the New Content module, exposed via the /admin/new-content endpoint. The issue stems from unsafely handling user-supplied content (example payload: ), enabling client-side script execution. The attack is remotely initiable but r...

5.4CVSS4.3AI score0.00676EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•11 views

CVE-2022-1590: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input leads to cross site scripting. The attack can be initiated remotely but...

5.4CVSS4AI score0.00676EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•11 views

PT-2022-13987

Name of the Vulnerable Software and Affected Versions Bludit version 3.13.1 Description A vulnerability was found in the New Content module, specifically affecting the endpoint "/admin/new-content". The issue arises from the manipulation of the content argument with malicious input, such as alert...

5.4CVSS0.00676EPSS
SaveExploits1References7
NVD
NVD
•added 2022/04/27 8:15 a.m.•43 views

CVE-2022-1503

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

5.4CVSS0.00659EPSS
SaveExploits1References2
Prion
Prion
•added 2022/04/27 8:15 a.m.•27 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

3.5CVSS5.3AI score0.00659EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/04/27 7:50 a.m.•17 views

CVE-2022-1503 GetSimple CMS Content Module edit.php cross site scripting

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

3.5CVSS5.5AI score0.00659EPSS
SaveExploits1References2
Mend
Mend
•added 2022/04/27 7:50 a.m.•5 views

CVE-2022-1503

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

5.4CVSS0.00659EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/04/27 7:50 a.m.•44 views

CVE-2022-1503 GetSimple CMS Content Module edit.php cross site scripting

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...

3.5CVSS5.5AI score0.00659EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/27 12:00 a.m.•8 views

CVE-2022-1503: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like leads to cross site scripting. The attack may be launched remotely but...

5.4CVSS4.1AI score0.00659EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/04/27 12:00 a.m.•6 views

PT-2022-13918

Name of the Vulnerable Software and Affected Versions GetSimple CMS affected versions not specified Description A problematic issue has been found in GetSimple CMS, affecting the file /admin/edit.php of the Content Module. The manipulation of the post-content argument with an input like alert1...

5.4CVSS0.00659EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2021/07/09 10:15 p.m.•24 views

CVE-2020-25391

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

5.4CVSS5.6AI score0.0045EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/09 10:15 p.m.•33 views

CVE-2020-25391

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

5.4CVSS0.0045EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/07/09 9:56 p.m.•44 views

CVE-2020-25391

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

5.5AI score0.0045EPSS
SaveExploits1References1
Mend
Mend
•added 2021/07/09 9:56 p.m.•9 views

CVE-2020-25391

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

5.4CVSS0.0045EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/11/03 12:00 a.m.•12 views

File Inclusion Vulnerability in BEESCMS Enterprise Website Management System

BEESCMS enterprise website management system is a PHP + MYSQL, multi-language system, the content module is easy to expand, the template style. A file inclusion vulnerability exists in BEESCMS enterprise website management system. An attacker can exploit this vulnerability to gain server privileg...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/08/27 12:00 a.m.•16 views

Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-49437)

Navigate CMS is a powerful and intuitive content management system. A cross-site scripting vulnerability exists in the Content module of Navigate CMS 2.9. This vulnerability can be exploited by attackers to conduct cross-site scripting attacks...

5.4CVSS6.2AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2020/08/26 5:15 p.m.•42 views

CVE-2020-23656

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...

5.4CVSS5.4AI score0.00531EPSS
SaveExploits1References1
Rows per page
Query Builder