Cameleon CMS 2.7.4 Cross Site Scripting

Exploit Title: Authenticated Persistent XSS in Cameleon CMS 2.7.4 Google Dork: intext:"Camaleon CMS is a free and open-source tool and a fexible content management system CMS based on Ruby on Rails" Date: 2023-10-05 Exploit Author: Yasin Gergin Vendor Homepage: http://camaleon.tuzitio.com Softwar...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor CMS 0.12.7 is affected by an XSS vulnerability that allows an admin (privileged user) to inject crafted post content, triggering script execution in other users’ browsers. The issue is described across multiple sources as a cross-site scripting flaw stemming from the post creation feature;...

Cross-site Scripting

Anch allows admins to cause XSS via crafted post content...

PT-2020-13024

Name of the Vulnerable Software and Affected Versions Anchor version 0.12.7 Description The issue allows admins to cause cross-site scripting XSS via crafted post content. Recommendations For Anchor version 0.12.7, consider restricting the ability of admins to post crafted content until a fix is...