CVE-2023-37269

Winter CMS is vulnerable to a stored XSS due to unsanitized SVG uploads in the branding logo function prior to v1.2.3. The issue requires an attacker with backend.manage_branding permission (or higher) and user interaction by visiting the URL of the malicious SVG; exploitation is further constrai...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CMS Made Simple 代码问题漏洞

CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A code issue vulnerability exists in CMS Made Simple v2.2.17,...

taoCMS 跨站脚本漏洞

taoCMS is a Chinese micro CMS Content Management System. A security vulnerability exists in taoCMS 3.0.2 and earlier versions, which stems from a DOM-type cross-site scripting XSS vulnerability...

CVE-2023-3506

A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/supportticket of the component Create Ticket Page. The manipulation of the argument details with the input alert1 leads to...

Command Execution Vulnerability in MCMS of Jiangxi Minsoft Technology Co.

MCMS is a java-based development of a lightweight open source content management system . Jiangxi Mingsoft Technology Co., Ltd MCMS command execution vulnerability, an attacker can exploit the vulnerability to execute commands...

HongCMS Cross-Site Request Forgery Vulnerability (CNVD-2023-54439)

HongCMS is an open source lightweight content management system CMS. A cross-site request forgery CSRF vulnerability exists in HongCMS version 3.0.0. An attacker can exploit this vulnerability to execute arbitrary code and elevate privileges via the updateusers parameter...

Wuzhicms SQL Injection Vulnerability

Wuzhicms is five fingers WUZHI company's set of PHP and MySQL based on open source content management system CMS. A SQL injection vulnerability exists in Wuzhicms version 4.1.0. An attacker can exploit this vulnerability to execute arbitrary code via the checktitle function...

WCMS 路径遍历漏洞

WCMS is a content management system CMS. A security vulnerability exists in WCMS version v.0.3.2. An attacker can exploit the vulnerability to execute arbitrary code via the wex/cssjs.php parameter...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Kyushu Ecommerce Technology CmsEasy. A security vulnerability exists in CmsEasy version v7.0.0, which stems from not encrypting form data to send user credentials in plaintext...

EBCMS 代码问题漏洞

EBCMS is Ebay a932278490 open source a content management system . A security vulnerability exists in EBCMS version 1.1.0. An attacker can exploit the vulnerability to execute arbitrary code via type parameter...

GHSA-96XV-RMWJ-6P9W Grav Server-side Template Injection (SSTI) via Twig Default Filters

Hi, actually we have sent the bug report to [email protected] on 27th March 2023 and on 10th April 2023. Grav Server-side Template Injection SSTI via Insufficient Validation in filterFilter Summary: | Product | Grav CMS | | ----------------------- | --------------------------------------------...

TYPO3 SQL注入漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 5.1.2 that stems from the ipandlanguageredirect extension that allows SQL injection...

CVE-2023-34452

Grav CMS (flat‑file)

Design/Logic Flaw

Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection. Remote code execution is possible by embedding malicious PHP code on the administrator screen by a user with page editing privileges. Version 1.7.42 contains a fix for this...

CVE-2023-34448 Grav Server-side Template Injection (SSTI) via Twig Default Filters

Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default filter function, did not block other built-in functions exposed by Twig's Core Extension that could be used to invoke...

CVE-2023-34253 Grav vulnerable to Server-side Template Injection (SSTI) via Denylist Bypass

Grav is a flat-file content management system. Prior to version 1.7.42, the denylist introduced in commit 9d6a2d to prevent dangerous functions from being executed via injection of malicious templates was insufficient and could be easily subverted in multiple ways -- 1 using unsafe functions that...

CVE-2023-34253

CVE-2023-34253 concerns Grav CMS before v1.7.42, where a weakened denylist for dangerous Twig functions allows a logged‑in admin with page creation/update rights (or a user with Admin login) to inject templates and achieve remote code execution. The vulnerability stems from multiple bypass pathwa...

CVE-2023-34252

CVE-2023-34252 — Grav SSTI (GravExtension.filterFilter) grav CMS versions prior to 1.7.42 contain a logic flaw in GravExtension.filterFilter() where unsafe-function validation runs only for string arrows; passing an array as a callable bypasses the check, enabling authenticated admin users with p...

CVE-2023-34252 Grav Server-side Template Injection via Insufficient Validation in filterFilter

Grav is a flat-file content management system. Prior to version 1.7.42, there is a logic flaw in the GravExtension.filterFilter function whereby validation against a denylist of unsafe functions is only performed when the argument passed to filter is a string. However, passing an array as a...