CVE-2019-20522

CVE-2019-20522 affects ilchCMS 2.1.23 and enables Cross-Site Scripting via the index.php/partner/index Link parameter. The connected sources consistently describe a client-side script execution vulnerability in ilchCMS, with no details provided on affected versions beyond 2.1.23 in public CVE rec...

CVE-2019-20522

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...

CVE-2019-20523

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

CVE-2019-20523

CVE-2019-20523 affects ilchCMS 2.1.23, where an XSS vulnerability exists in the index.php/partner/index Name parameter. The issue allows injection of script into client-side context, as described in public sources. The NVD entry lists an overall impact of low to partial integrity impact (I:L) wit...

CVE-2019-20524

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...

CVE-2019-20524

CVE-2019-20524 affects ilchCMS 2.1.23 and allows cross-site scripting via the Banner parameter in index.php/partner/index. The root cause is a reflected XSS vector that exposes client-side code execution opportunities when a banner parameter is manipulated, as described across multiple sources (e...

PT-2020-10500

Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the index.php/partner/index API endpoint, specifically through the Banner parameter. Recommendations For ilchCMS version 2.1.23, avoid using the Banner parameter in the...

PT-2020-10499

Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the Name parameter in the "index.php/partner/index" endpoint. Recommendations For ilchCMS version 2.1.23, avoid using the Name parameter in the "index.php/partner/index" endpoint...

PT-2020-10498

Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the Link parameter in the "index.php/partner/index" endpoint. Recommendations For ilchCMS version 2.1.23, avoid using the Link parameter in the "index.php/partner/index" endpoint...

CVE-2019-20522: Improper Neutralization of Input During Web Page Generation

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...

CVE-2019-20523: Improper Neutralization of Input During Web Page Generation

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

CVE-2019-20524: Improper Neutralization of Input During Web Page Generation

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...

ilchCMS 2.1.23 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple Cross-site Scripting Vulnerabilities in ilchCMS 2.1.23 Affected Software: ilchCMS Affected Versions: 2.1.23 Vendor Homepage: https://www.ilch.de/ Vulnerability Type: Cross-site Scripting Severity: Medium Status: Fixed CVSS Sco...