15 matches found
CVE-2026-51564
CVE-2026-51564 Security Advisory for CVE-2026-51564 Description An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request. Affected Components: App/Route.php, publichtml/index.php Mitigation At the time of...
CVE-2026-51565
CVE-2026-51565 Security Advisory for CVE-2026-51565 Description Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request Mitigation At the time of...
EUVD-2026-49669
Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...
EUVD-2026-49638
An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...
CVE-2026-51565
Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...
CVE-2026-51565
Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...
CVE-2026-51564
An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...
CVE-2026-51564
An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...
CVE-2026-51564
An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...
CVE-2026-51565
Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...
CVE-2026-51564
The Milk admin software (versions
PT-2026-65311
Name of the Vulnerable Software and Affected Versions Milk admin versions 0.9.8 and earlier Description An issue exists where remote attackers can redirect users to arbitrary external URLs by sending a crafted request. This is caused by improper handling of the redirect parameter. Recommendations...
CVE-2026-51564
An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...
PT-2026-65313
Name of the Vulnerable Software and Affected Versions Milk admin versions prior to 0.9.9 Description Cross-site scripting XSS occurs in the Modules/Docs/DocsController.php file. This issue allows remote attackers to inject arbitrary HTML or web scripts through the action parameter in a specially...