CVE-2026-36763

The SpringBlade microservices development platform, specifically version v4.8.0 , contains a stored cross-site scripting (XSS) vulnerability. The flaw exists in the /api/blade-desk/notice/submit endpoint, where the application fails to properly neutralize input within the content parameter. This ...

GreenCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-13895)

GreenCMS is a content management system CMS based on ThinkPHP. A cross-site request forgery vulnerability exists in GreenCMS version 2.3.0603. A remote attacker can exploit this vulnerability by sending the 'content' parameter to the index.php?m=admin&c=media&a=fileconnect URL to execute arbitrar...