CVE-2024-35203

Mahara versions prior to 22.10.6, 23.04.6, and 24.04.1 are vulnerable to cross-site scripting (XSS) . The root cause is the Mahara filebrowser system failing to properly neutralize input, allowing a file with JavaScript code in its name to be uploaded and executed in a user's browser. Remediation...

BigTree CMS cross-site scripting vulnerability (CNVD-2018-21319)

Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in /admin/ajax/file-browser/upload/ in Fastspot BigTree version 4.2.23. A remote attacker can exploit this vulnerability to inject...

CVE-2018-18308

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ aka the image upload area...

CVE-2018-18308: Improper Neutralization of Input During Web Page Generation

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ aka the image upload area...

PT-2018-14398

Name of the Vulnerable Software and Affected Versions BigTree version 4.2.23 Description A Stored XSS issue has been found in the image upload area, specifically at the "/admin/ajax/file-browser/upload/" API endpoint. Recommendations For BigTree version 4.2.23, update to a newer version that...