PT-2019-15676

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description The issue concerns a stored XSS vulnerability. It is related to the po-admin/route.php?mod=post&act=edit endpoint, where the post1content parameter is vulnerable. Recommendations For PopojiCMS version 2.0.1,...

CVE-2018-10298

CVE-2018-10298 concerns Discuz! DiscuzX up to X3.4, where a reflected XSS is possible via forum.php?mod=post&action=newthread. The root cause is that data/template/1_diy_portal_view.tpl.php does not restrict user-submitted content, enabling injected scripts. This is documented across multiple fee...

PT-2018-9808

Name of the Vulnerable Software and Affected Versions: Discuz! versions through X3.4 Description: The issue is related to reflected XSS. It can be exploited via the "forum.php?mod=post&action=newthread" endpoint because the data/template/1 diy portal view.tpl.php file does not restrict the conten...