CVE-2025-26136

CVE-2025-26136 is a SQL injection vulnerability in mysiteforme versions prior to 2025.01.1. The NVD entry shows a CVSS 3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, LOW attack complexity, no privileges, and no user interaction required, affecting confidentiality, integrity, and ava...

CVE-2024-13137 wangl1989 mysiteforme SiteController RestResponse cross site scripting

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site scripting. It is possible to initiate the...