PT-2021-10895 · Nonecms · Nonecms

Name of the Vulnerable Software and Affected Versions: NoneCMS version 1.3 Description: The issue concerns a CSRF vulnerability in the public/index.php/admin/nav/add.html endpoint, where an attacker can inject arbitrary web script or HTML via the name parameter to launch a stored XSS attack...