EUVD-2019-3185

Malware in sbrugna...

CVE-2020-21087

Cross Site Scripting XSS in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool...

CVE-2020-21087: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool...

PT-2021-10585

Name of the Vulnerable Software and Affected Versions: X2Engine X2CRM versions prior to 6.9 Description: The issue allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the New Name field of the Rename a Module tool. This is a Cross Site Scripting XSS...

X2Engine X2CRM 跨站脚本漏洞

pczupil X2CRM is a pczupil open source application. A next generation open source social selling application for small and medium sized businesses. X2Engine X2CRM v6.9 and later versions of a security vulnerability , a remote attacker can exploit the vulnerability through the "Rename Module" tool...

CVE-2019-11513

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

CVE-2019-11513: Improper Neutralization of Input During Web Page Generation

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

PT-2019-12346

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions through 2.2.10 Description The issue concerns a Reflected XSS in the File Manager component. This occurs via the New name field when performing a Rename action. Recommendations For versions through 2.2.10, update to a...