CVE-2025-26136

A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1 . This vulnerability, classified as CWE-89 , allows for the improper neutralization of special elements used in SQL commands. The impact is rated as CRITICAL with a CVSS 3.1 base score of 9.8 , potentially affecting c...

CVE-2024-13137 wangl1989 mysiteforme SiteController RestResponse cross site scripting

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site scripting. It is possible to initiate the...