Lucene search
+L

221 matches found

Prion
Prion
added 2023/10/27 1:15 a.m.18 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menuid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

3.3CVSS4.9AI score0.00523EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/10/27 12:31 a.m.24 views

CVE-2023-5811 flusity CMS posts.php loadPostAddForm cross site scripting

A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menuid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

2.4CVSS3.8AI score
SaveExploits0References6
Cvelist
Cvelist
added 2023/10/27 12:31 a.m.31 views

CVE-2023-5811 flusity CMS posts.php loadPostAddForm cross site scripting

A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menuid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

3.3CVSS5.1AI score0.00523EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/10/27 12:31 a.m.15 views

CVE-2023-5811 flusity CMS posts.php loadPostAddForm cross site scripting

A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menuid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

3.3CVSS6.2AI score0.00523EPSS
SaveExploits1References4
CVE
CVE
added 2023/10/27 12:31 a.m.66 views

CVE-2023-5811

The CVE-2023-5811 issue affects flusity CMS, specifically the function loadPostAddForm in core/tools/posts.php. The vulnerability arises from manipulating the menu_id argument, enabling cross-site scripting (XSS). Exploitation can be performed remotely, and public disclosure has occurred. A patch...

4.8CVSS4.2AI score0.00523EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2023/10/27 12:31 a.m.23 views

CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting

A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...

3.3CVSS5.2AI score0.00494EPSS
SaveExploits1References4
OSV
OSV
added 2023/10/27 12:31 a.m.11 views

CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting

A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...

2.4CVSS3.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/10/27 12:31 a.m.15 views

CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting

A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...

3.3CVSS6.2AI score0.00494EPSS
SaveExploits1References4
CVE
CVE
added 2023/10/27 12:31 a.m.44 views

CVE-2023-5810

Summary (CVE-2023-5810): Flusity CMS is affected via the loadPostAddForm function in core/tools/posts.php. Manipulation of the edit_post_id parameter enables cross-site scripting. The advisory indicates remote exploitation and that the exploit has been disclosed publicly. A patch identifier is pr...

4.8CVSS4.3AI score0.00494EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.13 views

flusity CMS Cross-Site Scripting Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in Flusity CMS, which stems from the parameter editpostid in the loadPostAddForm function of core/tools/posts.php that can lead to cross-site scripting...

4.8CVSS6.5AI score0.00494EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/10/27 12:0 a.m.10 views

PT-2023-32346 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity CMS affected versions not specified Description: A critical issue has been discovered, affecting the handleFileUpload function in the core/tools/upload.php file. The manipulation of the uploaded file argument leads to unrestricted...

8.8CVSS5AI score0.00692EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.7 views

flusity CMS 安全漏洞

flusity CMS is a user interaction interface solution that you can easily change or add code to. Flusity CMS suffers from an arbitrary file upload vulnerability that stems from the lack of validation of the uploaded file in the handleFileUpload function in core/tools/upload.php with the parameter...

8.8CVSS7.7AI score0.00692EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/10/27 12:0 a.m.11 views

PT-2023-32344 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity CMS affected versions not specified Description: A problematic issue has been found in flusity CMS, affecting the loadPostAddForm function of the file core/tools/posts.php. The manipulation of the edit post id argument leads to...

4.8CVSS4.1AI score0.00494EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/10/27 12:0 a.m.10 views

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in Flusity CMS, which stems from the parameter menuid in the loadPostAddForm function of core/tools/posts.php that can lead to cross-site scripting...

4.8CVSS6.5AI score0.00523EPSS
SaveExploits1References5
NVD
NVD
added 2023/10/26 6:15 p.m.23 views

CVE-2023-5793

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...

5.4CVSS4.2AI score0.00434EPSS
SaveExploits1References4
Prion
Prion
added 2023/10/26 6:15 p.m.18 views

Cross site scripting

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...

4CVSS5.2AI score0.00434EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2023/10/26 5:0 p.m.65 views

CVE-2023-5793

Summary: CVE-2023-5793 affects flusity CMS, specifically the Dashboard component’s function loadCustomBlocCreateForm in /core/tools/customblock.php. The vulnerability arises from input handling of the argument customblock_place , enabling cross-site scripting (XSS) . The issue can be triggered re...

5.4CVSS4.3AI score0.00434EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/26 5:0 p.m.5 views

CVE-2023-5793 flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...

4CVSS6.2AI score0.00434EPSS
SaveExploits1References4
OSV
OSV
added 2023/10/26 5:0 p.m.25 views

CVE-2023-5793 flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...

3.5CVSS3.7AI score
SaveExploits0References6
CNNVD
CNNVD
added 2023/10/26 12:0 a.m.13 views

flusity CMS Cross-Site Scripting Vulnerability

flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site scripting vulnerability exists in flusity CMS, which stems from an issue with the loadCustomBlocCreateForm function in /core/tools/customblock.php in the component Dashboard, which leads t...

5.4CVSS6.3AI score0.00434EPSS
SaveExploits1References6
Rows per page
Query Builder