CVE-2024-35203

Mahara versions prior to 22.10.6, 23.04.6, and 24.04.1 are vulnerable to cross-site scripting (XSS) . The root cause is the Mahara filebrowser system failing to properly neutralize input, allowing a file with JavaScript code in its name to be uploaded and executed in a user's browser. Remediation...

BigTree CMS cross-site scripting vulnerability (CNVD-2018-21319)

Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in /admin/ajax/file-browser/upload/ in Fastspot BigTree version 4.2.23. A remote attacker can exploit this vulnerability to inject...

CVE-2018-18308: Improper Neutralization of Input During Web Page Generation

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ aka the image upload area...