CVE-2020-18145

Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...

CVE-2024-41351

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...

CVE-2024-41351

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...

bjyadmin 安全漏洞

bjyadmin is an integrated application based on ThinkPHP extensions by the individual developer baijunyao. A security vulnerability exists in bjyadmin version a560fd5, which stems from a cross-site scripting XSS vulnerability via Public/statics/umeditor123/php/getContent.php...

CVE-2024-41351

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...

CVE-2024-41351

CVE-2024-41351 affects bjyadmin (ThinkPHP-based) via Cross-Site Scripting in Public/statics/umeditor1_2_3/php/getContent.php. Root cause is an XSS vulnerability in that endpoint. CVSS: Network attack vector, Low confidentiality/integrity impact, high user interaction required, scope changed (per ...

CVE-2024-41351

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...

PT-2024-29370

Name of the Vulnerable Software and Affected Versions bjyadmin version a560fd5 Description The issue is a Cross Site Scripting XSS vulnerability. This occurs through the Public/statics/umeditor1 2 3/php/getContent.php endpoint. Recommendations For version a560fd5, as a temporary workaround,...

CVE-2024-41351: Improper Neutralization of Input During Web Page Generation

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...

CVE-2020-18145

Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...

CVE-2020-18145

Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...

CVE-2020-18145

Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...

CVE-2020-18145: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php...

PT-2021-10139

Name of the Vulnerable Software and Affected Versions: umeditor version 1.2.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the /public/common/umeditor/php/getcontent.php endpoint. Recommendations: For umeditor version 1.2.3, update to a newer version...

Cross-site scripting vulnerability in Catfish CMS 'getContent.php' page

Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS 'getContent.php' page. The program fails to filter user input, allowing an attacker to construct a malicious web page and trick users into parsing it to execute arbitra...