PYSEC-2026-2880 Improper Restriction of XML External Entity Reference in Plone

Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role...

CVE-2022-30861

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

CVE-2021-32162

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2020-23240

Cross Site Scripting XSS vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature...

CVE-2020-13852

Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Manager feature...

CVE-2022-30861

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

CVE-2022-30861: Improper Neutralization of Input During Web Page Generation

FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature...

PT-2020-17037

Name of the Vulnerable Software and Affected Versions Plone versions prior to 5.2.3 Description The issue allows XXE attacks through a feature explicitly available to the Manager role. Recommendations For versions prior to 5.2.3, update to version 5.2.3 or later to resolve the issue...

CVE-2020-13852

Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Manager feature...