Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•4 views

CVE-2023-28819: Improper Neutralization of Input During Web Page Generation

Concrete CMS previously concrete5 versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder names...

5.4CVSS5.7AI score0.0064EPSS
SaveExploits0References2
Mend
Mend
•added 2018/05/22 3:00 p.m.•3 views

CVE-2018-6378

In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager...

6.1CVSS0.01385EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/22 12:00 a.m.•3 views

CVE-2018-6378: Improper Neutralization of Input During Web Page Generation

In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager...

6.1CVSS7.3AI score0.01385EPSS
SaveExploits0References2
Rows per page
Query Builder