CVE-2025-29306

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component...

CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-26206

Sell Done Storefront v.1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the index.html component. The root cause is the absence of anti-CSRF tokens , allowing a remote attacker to trick an authenticated user into performing privileged actions, such as changing user roles. This can...

YznCMS 安全漏洞

YznCMS is a backend development framework. A cross-site scripting vulnerability exists in YznCMS version 1.4.2, which stems from the lack of effective filtering and escaping of user-supplied data in the component /index/index.html, and can be exploited by an attacker to execute arbitrary Web scri...