Lucene search
K

14 matches found

NVD
NVD
added 2025/10/16 7:15 p.m.4 views

CVE-2025-62425

MAS Matrix Authentication Service is a user management and authentication service for Matrix homeservers, written and maintained by Element. A logic flaw in matrix-authentication-service 0.20.0 through 1.4.0 allows an attacker with access to an authenticated MAS session to perform sensitive...

8.3CVSS0.00097EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-2035

Malware in sbrugna...

6.8CVSS6.4AI score0.00107EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-3091

Malicious code in bioql PyPI...

7.1CVSS6.3AI score0.01064EPSS
Exploits0References5
NVD
NVD
added 2024/10/24 7:15 p.m.9 views

CVE-2024-46998

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue...

7.1CVSS0.01064EPSS
Exploits0References2
OSV
OSV
added 2024/10/24 6:52 p.m.10 views

CVE-2024-46998 baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue...

7.1CVSS5.8AI score0.01064EPSS
Exploits0References4
CVE
CVE
added 2024/10/24 6:52 p.m.42 views

CVE-2024-46998

CVE-2024-46998 affects baserCMS with a cross-site scripting (XSS) vulnerability in the Edit Email Form Settings feature. Multiple connected sources confirm the issue resides in baserCMS and can permit script execution under certain conditions. The issue is addressed in newer baserCMS releases: up...

7.1CVSS5.7AI score0.01064EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/24 6:52 p.m.14 views

CVE-2024-46998 baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue...

7.1CVSS6.2AI score0.01064EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2024/10/24 5:45 p.m.11 views

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

XSS vulnerability in Edit Email Form Settings Feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Edit Email Form Settings feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference...

7.1CVSS6.3AI score0.01064EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/10/24 5:45 p.m.9 views

GHSA-P3M2-MJ3J-J49X baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

XSS vulnerability in Edit Email Form Settings Feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Edit Email Form Settings feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference...

7.1CVSS6AI score0.01064EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/24 12:0 a.m.1 views

baserCMS 跨站脚本漏洞

baserCMS is an Enterprise Content Management System CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS versions prior to 5.1.2, which stems from a cross-site scripting vulnerability in the Edit Email Form Settings feature...

7.1CVSS5.9AI score0.01064EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/12/30 12:0 a.m.2 views

IDURAR ERP/CRM Cross-Site Scripting Vulnerability

IDURAR ERP/CRM is an open source content management system from the individual developer Salah Eddine Lalami. A cross-site scripting vulnerability exists in IDURAR ERP/CRM 2.0.1 and prior versions, which originates from the ability to execute cross-site scripting via the Edit Email Template featu...

5.4CVSS6.3AI score0.0012EPSS
Exploits1References3
OSV
OSV
added 2021/11/01 3:15 a.m.1 views

CVE-2021-41313

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

4.3CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2010/05/24 5:30 p.m.1 views

CVE-2010-2013

Cross-site scripting XSS vulnerability in cp/editemail.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS5.7AI score0.00296EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2010/05/24 5:30 p.m.2 views

CVE-2010-2015

Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in a viewinbox action to cp/cpmessages.php or 2 the id parameter to cp/editemail.php...

6.8CVSS6.3AI score0.00107EPSS
Exploits1References4
Rows per page
Query Builder