12 matches found
CVE-2020-18145
Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...
CVE-2024-41351
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...
CVE-2024-41351
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...
bjyadmin 安全漏洞
bjyadmin is an integrated application based on ThinkPHP extensions by the individual developer baijunyao. A security vulnerability exists in bjyadmin version a560fd5, which stems from a cross-site scripting XSS vulnerability via Public/statics/umeditor123/php/getContent.php...
CVE-2024-41351
CVE-2024-41351 affects bjyadmin (ThinkPHP-based) via Cross-Site Scripting in Public/statics/umeditor1_2_3/php/getContent.php. Root cause is an XSS vulnerability in that endpoint. CVSS: Network attack vector, Low confidentiality/integrity impact, high user interaction required, scope changed (per ...
CVE-2024-41351
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...
CVE-2024-41351
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...
CVE-2020-18145
Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...
CVE-2020-18145
Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...
Cross site scripting
Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...
CVE-2020-18145
Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...
Cross-site scripting vulnerability in Catfish CMS 'getContent.php' page
Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS 'getContent.php' page. The program fails to filter user input, allowing an attacker to construct a malicious web page and trick users into parsing it to execute arbitra...