3 matches found
CVE-2023-28819: Improper Neutralization of Input During Web Page Generation
Concrete CMS previously concrete5 versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder names...
5.4CVSS5.7AI score0.0064EPSS
SaveExploits0References2
CVE-2018-6378
In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager...
6.1CVSS0.01385EPSS
SaveExploits0References3
CVE-2018-6378: Improper Neutralization of Input During Web Page Generation
In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager...
6.1CVSS7.3AI score0.01385EPSS
SaveExploits0References2
20