Cross-Site Scripting (XSS)

ContentTools is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of the onload argument in the Image Handler component, allowing an attacker to exploit it...

PT-2025-12550

Name of the Vulnerable Software and Affected Versions GetmeUK ContentTools versions up to 1.6.16 Description A problematic issue was found in the Image Handler component, where the manipulation of the onload argument leads to cross-site scripting. This issue can be exploited remotely. The estimat...