CVE-2025-15456: Improper Authentication

A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin/page-edit.php of the component Publish Page Handler. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit has been...

CVE-2021-44970

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

CVE-2021-44970: Improper Neutralization of Input During Web Page Generation

MiniCMS v1.11 was discovered to contain a cross-site scripting XSS vulnerability via /mc-admin/page-edit.php...

PT-2022-12273

Name of the Vulnerable Software and Affected Versions MiniCMS version 1.11 Description A cross-site scripting XSS issue was found in MiniCMS via the /mc-admin/page-edit.php API endpoint. This allows for potential malicious script execution. Recommendations For MiniCMS version 1.11, as a temporary...

CVE-2019-13339: Improper Neutralization of Input During Web Page Generation

In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php content box, which can be used to get a user's cookie...

PT-2019-13275

Name of the Vulnerable Software and Affected Versions MiniCMS version 1.10 Description A stored XSS issue was discovered in the content box of mc-admin/page-edit.php, which can be exploited to obtain a user's cookie. Recommendations For MiniCMS version 1.10, consider disabling the editing...