WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...

WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...

WordPress SP Project And Document Remote Code Execution Vulnerability

WordPress is a blogging platform developed based on the PHP language, which can be used to set up websites on servers supporting PHP and MySQL databases, and can also be used as a content management system CMS. WordPress SP Project And Document has a remote code execution vulnerability that can b...

Indexhibit improper access control vulnerability

Indexhibit is a web-based content management system. An improper access control vulnerability exists in the /config/config.php component of Indexhibit version 2.1.5. An attacker could exploit this vulnerability to view arbitrary files...

WordPress Social Warfare Remote Code Execution Vulnerability (CNVD-2021-77611)

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Social Warfare has a remote code execution vulnerability that can be exploited by...

WordPress Modern Events Calendar remote code execution vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up websites on servers supporting PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Modern Events Calendar has a remote code execution vulnerability that can be exploited...

S-CMS 跨站脚本漏洞

S-CMS is a PHP and MySQL based Content Management System CMS from China-based S-CMS. A security vulnerability exists in S-CMS, which stems from a cross-site scripting XSS vulnerability in v1.0 of S-CMS. The vulnerability can be exploited to execute arbitrary code via the component's admin tpl.php...

Indexhibit Cross-Site Scripting Vulnerability (CNVD-2021-67909)

Indexhibit is a web-based content management system. A reflection-based cross-site scripting vulnerability exists in the /plugin/ajax.php component of Indexhibit version 2.1.5. An attacker could use this vulnerability to execute arbitrary web script or HTML...

CVE-2020-22848

A remote code execution RCE vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands...

Electron Technologies FZC PopojiCMS Cross-Site Request Forgery Vulnerability

Electron Technologies FZC PopojiCMS is an open source content management system CMS based on the Popoji framework from Electron Technologies FZC. version 2.0.1 of Electron Technologies FZC PopojiCMS admin.php is vulnerable to cross-site request forgery. No detailed vulnerability details are...

Electron Technologies FZC PopojiCMS Cross-Site Scripting Vulnerability

Electron Technologies FZC PopojiCMS is an open source content management system CMS from Electron Technologies FZC based on the Popoji framework.A cross-site scripting vulnerability exists in Electron Technologies FZC PopojiCMS. No detailed vulnerability details are currently available...

Electron Technologies FZC PopojiCMS Path Traversal Vulnerability

Electron Technologies FZC PopojiCMS is an open source content management system CMS from Electron Technologies FZC based on the Popoji framework.A path traversal vulnerability exists in Electron Technologies FZC PopojiCMS. No detailed vulnerability details are available at this time...

Desdev DedeCMS 代码问题漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A security vulnerability exists in th...

CVE-2021-39136

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are...

CVE-2021-39136

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the management system of baserCMS. Users are advised to update as soon as possible. No workaround are...

CVE-2021-39136

baserCMS (Japanese-focused open source CMS) contains a cross-site scripting (XSS) vulnerability in the file upload feature for affected versions prior to 4.5.1. The vulnerability arises in the management system’s file upload path, allowing arbitrary script execution in a user’s browser if exploit...

The vulnerability of the unlink() function in the content management system CSZ CMS allows a hacker to delete any files they desire.

The vulnerability of the unlink function in the CSZ CMS content management system is related to errors in resource release. Exploiting this vulnerability could allow a remote attacker to delete arbitrary files...

Wuzhi CMS SQL Injection Vulnerability (CNVD-2021-66056)

WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. Wuzhi CMS has a SQL injection vulnerability in v4.1.0, which originates from a flag in the product /coreframe/app/order/admin/index.php page that fails to properly filter the special characters of the input...

WordPress plugin Current Book 'Book Title and Author field' cross-site scripting vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up websites on servers that support PHP and MySQL databases, and can also be used as a content management system CMS. cross-site scripting vulnerability exists in the WordPress plugin Current Book 'Book Title and...

CVE-2021-28001

A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting...