EUVD-2024-34394

Malicious code in bioql PyPI...

CVE-2024-11348

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use...

CVE-2024-11348 Reflected XSS in Eura7 CMSmanager

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use...

CVE-2024-11348 Reflected XSS in Eura7 CMSmanager

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use...

CVE-2024-11348

CVE-2024-11348 affects Eura7 CMSmanager (v4.6 and earlier). The flaw is a Reflected XSS via manipulation of a return GET parameter to a specific endpoint. Fixed by patch dated 17012022 addressing all affected versions. CVSS v4.0: Base 5.3 (Network, Low attack complexity, No privileges, Passive us...

Eura7 CMSmanager 安全漏洞

Eura7 CMSmanager is a simple and intuitive content management system from Eura7. A security vulnerability exists in Eura7 CMSmanager version 4.6 and earlier, which stems from vulnerability to reflective cross-site scripting attacks...

PT-2025-1641

Name of the Vulnerable Software and Affected Versions Eura7 CMSmanager versions 4.6 and below Description The issue is related to Reflected XSS attacks, which can be triggered through manipulation of the return GET request parameter sent to a specific endpoint. Recommendations For Eura7 CMSmanage...

CVE-2024-11348: Improper Neutralization of Input During Web Page Generation

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in use...