9 matches found
CVE-2019-20523
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...
Cross site scripting
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...
CVE-2019-20522
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...
PT-2020-10500
Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the index.php/partner/index API endpoint, specifically through the Banner parameter. Recommendations For ilchCMS version 2.1.23, avoid using the Banner parameter in the...
PT-2020-10499
Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the Name parameter in the "index.php/partner/index" endpoint. Recommendations For ilchCMS version 2.1.23, avoid using the Name parameter in the "index.php/partner/index" endpoint...
PT-2020-10498
Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the Link parameter in the "index.php/partner/index" endpoint. Recommendations For ilchCMS version 2.1.23, avoid using the Link parameter in the "index.php/partner/index" endpoint...
CVE-2019-20522: Improper Neutralization of Input During Web Page Generation
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...