14 matches found
CVE-2022-27885
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...
CVE-2022-27887
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/vod/data.html via the repeat parameter...
CVE-2022-27887
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/vod/data.html via the repeat parameter...
CVE-2022-27887
Summary: CVE-2022-27887 affects Maccms v10 and is a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter. The issue is described across multiple feeds (NVD/Red Hat/CNVD/CNNVD, etc.) with consistent details that the vulnerability originates ...
CVE-2022-27885
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...
CVE-2022-27885
CVE-2022-27885 affects Maccms v10 with multiple reflected XSS vulnerabilities in /admin.php/admin/website/data.html, exploitable via select and input parameters due to insufficient output filtering. Root cause described as lack of user-supplied data validation and filtering, enabling JavaScript i...
CVE-2022-27885
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...
CVE-2022-26573
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters...
CVE-2022-26573
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters...
CVE-2022-27885: Improper Neutralization of Input During Web Page Generation
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...
PT-2022-18666
Name of the Vulnerable Software and Affected Versions Maccms version 10 Description The issue concerns multiple reflected cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the /admin.php/admin/website/data.html endpoint via the select and input parameters...
CVE-2022-26573: Improper Neutralization of Input During Web Page Generation
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters...
CVE-2022-27887: Improper Neutralization of Input During Web Page Generation
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/vod/data.html via the repeat parameter...
PT-2022-18668
Name of the Vulnerable Software and Affected Versions Maccms version 10 Description A reflected cross-site scripting XSS issue was found in the /admin.php/admin/vod/data.html endpoint via the repeat parameter. Recommendations For Maccms version 10, avoid using the repeat parameter in the...