CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple 存储型XSS v2.2.18 作者：Sergio 描述： CMSmadesimple v.2.2.18 中的跨站脚本漏洞允许本地攻击者通过在“内容 - 新闻菜单”的 Extra 中注入精心构造的脚本来执行任意代码。 攻击向量： 对“内容 - 新闻菜单”的 Extra 输入进行过滤的漏洞，允许注入 JavaScript 代码，当用户访问网页时会被执行。 POC： 登录面板后，我们进入主菜单的“内容 - 新闻”部分。 我们编辑该“内容 - 新闻菜单”，使用我们创建的 payload，可以看到我们可以在 Extra 字段中注入任意 JavaScript 代码。 XS...

CVE-2023-43358-CMSmadesimple-Stored-XSS---News

CMSmadesimple Stored XSS v2.2.18 作者: Sergio 描述: CMSmadesimple v.2.2.18 中的跨站脚本（XSS）漏洞允许本地攻击者通过在 Content - News Menu 的标题中注入特制脚本来执行任意代码。 攻击向量: 脚本注入：由于“Content - News Menu”的标题条目清理存在漏洞，允许注入 JavaScript 代码，当用户访问网页时将会执行。 POC: 登录后台后，我们将进入 General Menu 中的“Content- News”部分。 我们用已经创建的载荷编辑该 Content - News...

CVE-2023-43358

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...

EUVD-2023-47770

Malicious code in bioql PyPI...

CVE-2023-43358

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...

CVE-2023-43358

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...

CVE-2023-43358

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...

Cross site scripting

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...

CVE-2023-43358

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...

CMS Made Simple Cross-Site Scripting Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMS Made Simple...

CVE-2023-43358

CVE-2023-43358 is a Cross Site Scripting vulnerability in CMS Made Simple 2.2.18 affecting the News Menu component . The issue permits a local attacker to execute arbitrary code by crafting a script in the Title parameter. The NVD entry lists a medium base score (4.3–5.4 range depending on source...

PT-2023-28803 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMSmadesimple version 2.2.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component. This enables the attacker to perform unauthorized...

CVE-2023-43353

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component...

CVE-2023-43353

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component...

CVE-2023-43353

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component...

Cross site scripting

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component...

CVE-2023-43353

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component...

PT-2023-28798 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMSmadesimple version 2.2.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component. This enables the attacker to perform unauthorized...