Lucene search
+L

34 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-15586

Malware in sbrugna...

5.4CVSS5.4AI score0.01574EPSS
SaveExploits4References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-8834

Malware in sbrugna...

8.8CVSS8.6AI score0.01003EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•8 views

EUVD-2025-12269

Malicious code in bioql PyPI...

7.3CVSS6.6AI score0.0028EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/23 1:44 a.m.•13 views

CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

5.4CVSS7.1AI score0.00485EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:25 a.m.•16 views

CVE-2019-10107

CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences - My Account" section...

5.4CVSS5.9AI score0.00644EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/26 6:12 a.m.•10 views

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

7.3CVSS7.2AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/22 7:15 p.m.•18 views

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

7.3CVSS0.0028EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/22 12:00 a.m.•63 views

CVE-2025-29621

The Francois Jacquet RosarioSIS v12.0.0 student information system contains a content spoofing vulnerability within the Theme configuration located under the My Preferences module. This flaw allows an attacker to manipulate application settings . To mitigate this risk, it is recommended to restri...

7.2AI score0.0028EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/22 12:00 a.m.•8 views

PT-2025-17591 · Unknown · Rosariosis

Name of the Vulnerable Software and Affected Versions: Francois Jacquet RosarioSIS version 12.0.0 Description: The issue is related to a content spoofing vulnerability found in the Theme configuration under the My Preferences module. This allows attackers to manipulate application settings...

7.3CVSS6.2AI score0.0028EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/04/22 12:00 a.m.•19 views

CVE-2025-29621

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings...

0.0028EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/20 10:15 p.m.•33 views

CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

5.4CVSS5.8AI score0.00485EPSS
SaveExploits1References2
Prion
Prion
•added 2023/10/20 10:15 p.m.•30 views

Cross site scripting

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

4.9CVSS5.7AI score0.00485EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•12 views

CMS Made Simple Cross-Site Scripting Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based permission management system, wizard-based installation and update mechanism, intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMS Made Simple...

5.4CVSS7AI score0.00485EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/10/20 12:00 a.m.•13 views

PT-2023-28800 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMSmadesimple version 2.2.18 Description: The issue allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component. This enables the attacker to...

5.4CVSS5.7AI score0.00485EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2023/10/20 12:00 a.m.•45 views

CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

6.5AI score0.00485EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/10/20 12:00 a.m.•15 views

CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

7.1AI score0.00485EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2021/04/22 12:00 a.m.•213 views

CMS Made Simple 2.2.15 Cross Site Scripting

Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting XSS Date: 2021/03/19 Exploit Author: bt0 Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip Version: 2.2.15 CVE: CVE-2021-28935...

3.5CVSS5.6AI score0.01574EPSS
SaveExploits4
zdt
zdt
•added 2021/04/22 12:00 a.m.•71 views

CMS Made Simple 2.2.15 - (title) Cross-Site Scripting (XSS) Vulnerability

Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting XSS Exploit Author: bt0 Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip Version: 2.2.15 CVE: CVE-2021-28935...

5.4CVSS0.01574EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2021/04/06 12:00 a.m.•38 views

CMS Made Simple <= 2.2.16 XSS Vulnerability

CMS Made Simple is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS5.3AI score0.01574EPSS
SaveExploits4References1
OSV
OSV
•added 2021/03/30 12:16 p.m.•15 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS6.1AI score0.01574EPSS
SaveExploits4References2
Rows per page
Query Builder