EUVD-2019-18403

Malware in sbrugna...

Cross site scripting

An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...

CVE-2019-9016: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request, as demonstrated by the...

PT-2019-19311

Name of the Vulnerable Software and Affected Versions MOPCMS versions through 2018-11-30 Description A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the formname parameter in a mod=column request. This can be demonstrated by the...