Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMSLink.php?lgid=1 URI...

PT-2018-14618

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the software. The issue is related to the "admin/SEMCMS Link.php?lgid=1" API endpoint. Recommendations For SEMCMS version 3.4, as a temporary workaround, consider...

PT-2018-14616

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found, allowing potential exploitation through the category key parameter in the "admin/SEMCMS Categories.php" endpoint, specifically when the parameters pid=1 and lgid=1 are...