Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/01/17 9:03 p.m.•57 views

CVE-2026-23643

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/17 12:00 a.m.•26 views

Linux Distros Unpatched Vulnerability : CVE-2026-23643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross- site-scripting vulnerability via query string parameter...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/01/16 9:15 p.m.•26 views

DEBIAN-CVE-2026-23643

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/16 9:15 p.m.•68 views

CVE-2026-23643

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS0.00281EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2026/01/16 9:15 p.m.•22 views

UBUNTU-CVE-2026-23643

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References8
osv_ghsa
osv_ghsa
•added 2026/01/16 9:00 p.m.•28 views

GHSA-QH8M-9QXX-53M5 CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

Impact The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. Patches This issue has been fixed in 5.2.12 and 5.3.1 Workarounds If you are unable to upgrade, you should avoid using Paginator::limitControl until you can upgrade...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/01/16 9:00 p.m.•71 views

CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

Impact The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. Patches This issue has been fixed in 5.2.12 and 5.3.1 Workarounds If you are unable to upgrade, you should avoid using Paginator::limitControl until you can upgrade...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/16 8:38 p.m.•15 views

CVE-2026-23643 CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/01/16 8:38 p.m.•80 views

EUVD-2026-2861

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/01/16 8:38 p.m.•84 views

CVE-2026-23643 CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS0.00281EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/01/16 8:38 p.m.•33 views

CVE-2026-23643 CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References8
Mend
Mend
•added 2026/01/16 8:38 p.m.•13 views

CVE-2026-23643

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/01/16 12:00 a.m.•21 views

PT-2026-3322

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.9AI score0.00281EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•21 views

CVE-2026-23643: Improper Neutralization of Input During Web Page Generation

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

5.4CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder