237 matches found
CVE-2024-26352
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addplaces.php...
CVE-2024-26351
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updateplace.php...
flusity CMS Security Vulnerability
flusity CMS is a user-interactive interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML...
CVE-2024-26491
A cross-site scripting (XSS) vulnerability exists in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 . The flaw stems from the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the Gall...
CVE-2024-26491
A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery name text field...
CVE-2024-23094
Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /cover/addons/infomediagallery/action/editaddonpost.php...
CVE-2024-26351
flusity-CMS version v2.33 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists specifically within the /core/tools/update_place.php component. Exploitation details, specific root cause mechanics, and remediation steps are not provided in the available documentation.
CVE-2024-26445
The software flusity-CMS v2.33 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists within the /core/tools/delete_place.php component. While the vulnerability is confirmed, the provided documents do not specify the exact technical root cause or the specific practica...
flusity CMS Security Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/deletetranslation.php...
CVE-2024-26445
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deleteplace.php...
CVE-2024-26349
The flusity-CMS v2.33 software contains a Cross-Site Request Forgery (CSRF) vulnerability. This flaw exists within the /core/tools/delete_translation.php component. While the vulnerability allows for unauthorized actions via forged requests, the provided documents do not specify the exact technic...
CVE-2024-23094
Flusity-CMS v2.33 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The vulnerability exists within the component located at /cover/addons/info_media_gallery/action/edit_addon_post.php . This flaw allows an attacker to perform unauthorized actions on behalf of a logged-in user. A proof...
CVE-2024-26490
A cross-site scripting XSS vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/updateplace.php...
CVE-2024-26351
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updateplace.php...
CVE-2024-26490
A cross-site scripting (XSS) vulnerability exists in the Addon JD Simple module of flusity-CMS v2.33 . The root cause is the improper neutralization of input, which allows an attacker to inject a crafted payload into the Title text field . Successful exploitation enables the execution of arbitrar...
CVE-2024-26489
A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field...
flusity CMS Security Vulnerability
flusity CMS is a user-interactive interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML...
CVE-2024-26489
A verified XSS in flusity-CMS v2.33: the Addon JD Flusity 'Social block links' module allows crafting payloads in the Profile Name field to execute arbitrary web scripts/HTML. Concretely, affects flusity-CMS 2.33 and the vulnerable component is the Social block links addon; root cause is insuffic...