20 matches found
CVE-2018-16623
Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...
CVE-2018-16623
Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...
CVE-2018-16624
panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...
CVE-2018-16624
panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...
Cross site scripting
panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...
Cross site scripting
Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...
CVE-2018-16623
Kirby CMS version 2.5.12 (CVE-2018-16623) is described in the provided documents as prone to a Persistent XSS via the Title field in the admin panel's Site options dropdown. The issue is consistently reported across CVE records and vendor/third-party sources in the connected documents. The availa...
CVE-2018-16623
Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown...
CVE-2018-16624
Kirby CMS – Kirby v2.5.12 is affected. The vulnerability is in panel/pages/home/edit where an XSS flaw can be triggered by the title of a newly created page. The available connected documents confirm the component/file (panel/pages/home/edit) and the impact (XSS). No explicit root cause or exploi...
CVE-2018-16624
panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...
Cross site scripting
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file...
CVE-2018-16630
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file...
CVE-2018-16630
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file...
CVE-2018-16627
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...
CVE-2018-16627
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...
CVE-2018-16627
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...
CVE-2018-16627
CVE-2018-16627 affects Kirby CMS, specifically the panel/login functionality in version 2.5.12, where a Host header injection is possible through the forget password feature. The connected documents confirm the vulnerability description but do not provide details on affected variants, impact scop...
CVE-2018-16628
panel/login in Kirby v2.5.12 allows XSS via a blog name...