2 matches found
CVE-2021-25197
Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...
6.1CVSS5.9AI score0.00838EPSS
SaveExploits1References1
CVE-2021-25197
The CVE-2021-25197 item applies to SourceCodester Content Management System v1.0, where an XSS vulnerability exists in the admin/new_content.php page. The underlying issue is that the search parameter is injectable, allowing remote attackers to inject arbitrary web scripts or HTML. Documented imp...
6.1CVSS6AI score0.00838EPSS
SaveExploits1References1Affected Software1
20