CVE-2026-18478

Magnolia CMS is affected by a Stored XSS in the import functionality (CVE-2026-18478). An attacker with editor privileges can inject arbitrary HTML/JavaScript into the name of an uploaded image, which is rendered/executed when the image is opened. The issue is fixed in Magnolia CMS version 6.3.10...

CVE-2026-18478 Stored XSS in Magnolia CMS

Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...

CVE-2026-18478

Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...

EUVD-2013-4477

Malware in sbrugna...

EUVD-2021-12773

Malware in sbrugna...

EUVD-2021-12774

Malware in sbrugna...

EUVD-2022-36154

Malicious code in bioql PyPI...

EUVD-2022-1059

Malicious code in bioql PyPI...

EUVD-2022-1088

Malicious code in bioql PyPI...

EUVD-2022-1138

Malicious code in bioql PyPI...

CVE-2022-33098

Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting XSS vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2021-25893

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting XSS vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/...

CVE-2021-46364

A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file...

CVE-2021-25894

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting XSS vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter...

CVE-2013-4621

Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities...

Exploit for Deserialization of Untrusted Data in Magnolia-Cms Magnolia_Cms

CVE-2021-46364: YAML Deserialization in Magnolia CMS Magnolia...

Magnolia CMS Cross-Site Scripting (CVE-2022-33098)

A cross-site scripting vulnerability exists in Magnolia CMS. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)

Exploit Title: Magnolia CMS 6.2.19 - Stored Cross-Site Scripting XSS Date: 08/05/2022 Exploit Author: Giulio Garzia 'Ozozuz' Vendor Homepage: https://www.magnolia-cms.com/ Software Link:...

Magnolia CMS Cross-Site Scripting Vulnerability

Magnolia CMS is an application from the Swiss company Magnolia that provides a framework for building websites. version 6.2.19 of Magnolia CMS contains a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacke...

CVE-2022-33098

Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting XSS vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted SVG document, with JavaScript, for a profile picture...