CVE-2023-29854

DirCMS 6.0.0 has a Cross Site Scripting XSS vulnerability in the foreground...

CVE-2023-29854

creationtimestamp| type| source ---|---|--- 2023-04-18 22:29:19+00:00| seen| https://t.me/cibsecurity/62374 2025-03-06 02:17:23+00:00| seen| Telegram/eEwkC5fHWS-iTvifto3cahy5m358AsyEgF9cnxGom6tNlFu...

CVE-2023-29854

DirCMS 6.0.0 has a Cross Site Scripting XSS vulnerability in the foreground...

CVE-2023-29854

DirCMS 6.0.0 is affected by a foreground Cross-Site Scripting (XSS) vulnerability. Multiple sources (CNVD, NVD, Red Hat CVE entry, CN, PRION, CNNVD) describe the issue as stemming from insufficient filtering/escaping of user-supplied data in the frontend, enabling injection of arbitrary script/HT...