Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/03/26 8:17 a.m.•24 views

CVE-2025-2699

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS6.3AI score0.00358EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/24 9:34 a.m.•65 views

GHSA-4F2V-2GPQ-QHJG GetmeUK ContentTools Cross-Site Scripting (XSS)

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.1CVSS3.9AI score0.00358EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2025/03/24 9:34 a.m.•18 views

GetmeUK ContentTools Cross-Site Scripting (XSS)

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS6.2AI score0.00358EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2025/03/24 8:15 a.m.•51 views

CVE-2025-2699

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS0.00358EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/24 8:00 a.m.•75 views

CVE-2025-2699

CVE-2025-2699 affects GetmeUK ContentTools (up to version 1.6.16). The root cause is a cross-site scripting (XSS) vulnerability in the Image Handler component triggered by manipulation of the onload argument, allowing remote exploitation. Public exploit information exists. Affected environments a...

5.4CVSS6.2AI score0.00358EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/03/24 8:00 a.m.•49 views

CVE-2025-2699 GetmeUK ContentTools Image cross site scripting

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.1CVSS0.00358EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/03/24 8:00 a.m.•8 views

CVE-2025-2699 GetmeUK ContentTools Image cross site scripting

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.1CVSS6.2AI score0.00358EPSS
SaveExploits1References4
OSV
OSV
•added 2025/03/24 8:00 a.m.•11 views

CVE-2025-2699 GetmeUK ContentTools Image cross site scripting

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.1CVSS3.7AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•3 views

CVE-2025-2699: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS3.5AI score0.00358EPSS
SaveExploits1References1
Rows per page
Query Builder