306 matches found
CVE-2023-5811
A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menuid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2023-5811 flusity CMS posts.php loadPostAddForm cross site scripting
A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menuid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2023-5810
Summary (CVE-2023-5810): Flusity CMS is affected via the loadPostAddForm function in core/tools/posts.php. Manipulation of the edit_post_id parameter enables cross-site scripting. The advisory indicates remote exploitation and that the exploit has been disclosed publicly. A patch identifier is pr...
CVE-2023-5810
A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...
CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting
A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...
CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting
A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...
CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting
A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...
CVE-2023-5812: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function handleFileUpload of the file core/tools/upload.php. The manipulation of the argument uploadedfile leads to unrestricted upload. The attack can be launched remotely. The exploit...
CVE-2023-5810: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument editpostid leads to cross site scripting. The attack may be initiated remotely. The exploit has...
flusity CMS Cross-Site Scripting Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in Flusity CMS, which stems from the parameter editpostid in the loadPostAddForm function of core/tools/posts.php that can lead to cross-site scripting...
PT-2023-32346 · Unknown · Flusity-Cms
Name of the Vulnerable Software and Affected Versions: flusity CMS affected versions not specified Description: A critical issue has been discovered, affecting the handleFileUpload function in the core/tools/upload.php file. The manipulation of the uploaded file argument leads to unrestricted...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in Flusity CMS, which stems from the parameter menuid in the loadPostAddForm function of core/tools/posts.php that can lead to cross-site scripting...
PT-2023-32344 · Unknown · Flusity-Cms
Name of the Vulnerable Software and Affected Versions: flusity CMS affected versions not specified Description: A problematic issue has been found in flusity CMS, affecting the loadPostAddForm function of the file core/tools/posts.php. The manipulation of the edit post id argument leads to...
CVE-2023-5811: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menuid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
PT-2023-32345
Name of the Vulnerable Software and Affected Versions flusity CMS affected versions not specified Description A problematic issue was found in the function loadPostAddForm of the file core/tools/posts.php, where the manipulation of the argument menu id leads to cross-site scripting. This issue ca...
flusity CMS 安全漏洞
flusity CMS is a user interaction interface solution that you can easily change or add code to. Flusity CMS suffers from an arbitrary file upload vulnerability that stems from the lack of validation of the uploaded file in the handleFileUpload function in core/tools/upload.php with the parameter...
CVE-2023-5793
A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...
Cross site scripting
A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...
CVE-2023-5793
A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...
CVE-2023-5793 flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting
A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...