87 matches found
OpenSolution Quick CMS Cross-Site Scripting Vulnerability
OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in OpenSolution Quick CMS version v.6.7, which stems from a cross-site scripting XSS vulnerability in the component Languages Menu...
CVE-2023-43345
OpenSolution Quick CMS 6.7 is affected by a stored XSS in the Pages Menu component, triggered by crafting the Content - Name parameter. The vulnerability allows a local attacker to execute arbitrary code via the injected script, with impact on confidentiality, integrity, and availability as per t...
PT-2023-28794 · Opensolution · Opensolution Quick Cms
Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component. This enables the attacker to...
PT-2023-28793 · Opensolution · Opensolution Quick Cms
Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component. This enables the...
CVE-2023-43345: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component...
CVE-2023-43344
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...
CVE-2023-43345
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component...
CVE-2023-43344
CVE-2023-43344 concerns OpenSolution Quick CMS v6.7. The vulnerability is a Cross-Site Scripting (XSS) flaw in the SEO - Meta description field of the Pages Menu component, allowing a local attacker to execute arbitrary script via a crafted payload. Root cause reported across sources is insuffici...
CVE-2023-43344: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...
opensolution Quick CMS Cross-Site Scripting Vulnerability
OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in opensolution Quick CMS version v.6.7, which stems from a cross-site scripting XSS vulnerability in the parameter Content-Name of the component Pages Menu...
CVE-2023-43342
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component...
CVE-2023-43343
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component...
CVE-2023-43343
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component...
CVE-2023-43343: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component...
OpenSolution Quick CMS Cross-Site Scripting Vulnerability
OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in OpenSolution Quick CMS version v.6.7, which stems from a cross-site scripting XSS vulnerability in the parameter Files-Description...
CVE-2023-43343
OpenSolution Quick CMS v6.7 is affected by an XSS vulnerability in the Pages Menu component through the Files - Description parameter, enabling a local attacker to execute arbitrary code via crafted script. Public details indicate no confirmed fix/version with patch; some sources suggest restrict...
PT-2023-28792 · Opensolution · Opensolution Quick Cms
Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component. This enables the attacke...
CVE-2020-35754
OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...
CVE-2020-35754
OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...
Code injection
OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...