3 matches found
CVE-2022-30982
An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username...
5.4CVSS5.8AI score0.00569EPSS
SaveExploits3References1
CVE-2022-30981
An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution...
8.8CVSS8.1AI score0.01345EPSS
SaveExploits2References1
Gentics Software Gentics CMS Cross-Site Script Vulnerability
Gentics Software Gentics CMS is a digital publishing and content management system from the Austrian company Gentics Software. A cross-site scripting vulnerability exists in Gentics CMS version 5.36.29. An attacker can exploit this vulnerability to store malicious JavaScript code in user names an...
5.4CVSS5.6AI score0.00569EPSS
SaveExploits3References4
20