Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-25182

Malicious code in bioql PyPI...

4.5CVSS6.3AI score0.00089EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-21797

Malicious code in bioql PyPI...

5.1CVSS4.8AI score0.00144EPSS
Exploits0References4
OSV
OSV
added 2025/08/19 3:31 p.m.6 views

GHSA-P632-58PP-C9XG moonshine Stored Cross-Site Scripting Vulnerability in Create Article

A stored cross-site scripting XSS vulnerability in the Create Article function of MoonShine v3.12.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Link parameter...

4.5CVSS5.2AI score0.00089EPSS
Exploits2References4
Github Security Blog
Github Security Blog
added 2025/08/19 3:31 p.m.11 views

moonshine Stored Cross-Site Scripting Vulnerability in Create Article

A stored cross-site scripting XSS vulnerability in the Create Article function of MoonShine v3.12.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Link parameter...

4.5CVSS5.7AI score0.00089EPSS
Exploits2References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.7 views

PT-2025-33738 · Moonshine · Moonshine

Name of the Vulnerable Software and Affected Versions: MoonShine version 3.12.3 Description: A stored cross-site scripting XSS vulnerability exists in the Create Article function. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Link parameter...

4.5CVSS6AI score0.00089EPSS
Exploits2References8
RedhatCVE
RedhatCVE
added 2025/07/19 5:46 p.m.4 views

CVE-2025-7748

A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...

5.1CVSS3.8AI score0.00144EPSS
Exploits0References1
CVE
CVE
added 2025/07/17 5:32 p.m.11 views

CVE-2025-7748

The CVE pertains to ZCMS 3.6.0, specifically the Create Article Page component. The vulnerability arises from improper handling of the Title parameter, enabling cross-site scripting (XSS). It is exploitable remotely and is publicly disclosed. Several connected sources corroborate that manipulatin...

5.1CVSS4AI score0.00144EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/07/17 5:32 p.m.7 views

CVE-2025-7748 ZCMS Create Article Page cross site scripting

A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...

5.1CVSS0.00144EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/17 5:32 p.m.2 views

CVE-2025-7748 ZCMS Create Article Page cross site scripting

A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...

5.1CVSS4.2AI score0.00144EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.1 views

PT-2025-29932 · Zcms · Zcms

Name of the Vulnerable Software and Affected Versions: ZCMS version 3.6.0 Description: A problematic issue exists in ZCMS 3.6.0 within the Create Article Page component. Manipulation of the Title argument can lead to cross-site scripting. The attack can be initiated remotely, and the exploit has...

5.1CVSS3.9AI score0.00144EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/07/17 12:0 a.m.2 views

ZVING ZCMS 代码注入漏洞

ZVING ZCMS Zeyuan Web Content Management System is an enterprise-level web content management software from China Zeyuan Software ZVING Company. A code injection vulnerability exists in ZVING ZCMS version 3.6.0, which originates from improper handling of the parameter Title in the component Creat...

5.1CVSS4.8AI score0.00144EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/04/18 6:31 p.m.10 views

Alkacon OpenCMS stored cross-site scripting (XSS) vulnerability

A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...

5.4CVSS5.7AI score0.00141EPSS
Exploits3References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/18 12:0 a.m.1 views

PT-2025-17320 · Alkacon · Alkacon Opencms

Name of the Vulnerable Software and Affected Versions: Alkacon OpenCMS version 17.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...

5.4CVSS5AI score0.00141EPSS
Exploits3References10
OSV
OSV
added 2022/12/15 9:30 p.m.15 views

GHSA-GQGQ-784Q-V9XP FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...

5.4CVSS5.3AI score0.00168EPSS
Exploits1References3
OSV
OSV
added 2022/12/15 7:15 p.m.10 views

CVE-2022-40001

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...

5.4CVSS5.4AI score
Exploits0References1
Cvelist
Cvelist
added 2022/12/15 12:0 a.m.9 views

CVE-2022-40001

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...

5.6AI score0.00168EPSS
Exploits1References1
Rows per page
Query Builder