Lucene search
+L

87 matches found

CNNVD
CNNVD
•added 2023/10/19 12:00 a.m.•15 views

OpenSolution Quick CMS Cross-Site Scripting Vulnerability

OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in OpenSolution Quick CMS version v.6.7, which stems from a cross-site scripting XSS vulnerability in the component Languages Menu...

5.4CVSS5.8AI score0.00486EPSS
SaveExploits1References3
CVE
CVE
•added 2023/10/19 12:00 a.m.•66 views

CVE-2023-43345

OpenSolution Quick CMS 6.7 is affected by a stored XSS in the Pages Menu component, triggered by crafting the Content - Name parameter. The vulnerability allows a local attacker to execute arbitrary code via the injected script, with impact on confidentiality, integrity, and availability as per t...

8.6CVSS7.5AI score0.00358EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•24 views

PT-2023-28794 · Opensolution · Opensolution Quick Cms

Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component. This enables the attacker to...

8.6CVSS7.9AI score0.00358EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•19 views

PT-2023-28793 · Opensolution · Opensolution Quick Cms

Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component. This enables the...

5.4CVSS6.4AI score0.00644EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•3 views

CVE-2023-43345: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component...

8.6CVSS8.2AI score0.00358EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/10/19 12:00 a.m.•52 views

CVE-2023-43344

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.7AI score0.00644EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/10/19 12:00 a.m.•33 views

CVE-2023-43345

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component...

7.8AI score0.00358EPSS
SaveExploits1References1
CVE
CVE
•added 2023/10/19 12:00 a.m.•56 views

CVE-2023-43344

CVE-2023-43344 concerns OpenSolution Quick CMS v6.7. The vulnerability is a Cross-Site Scripting (XSS) flaw in the SEO - Meta description field of the Pages Menu component, allowing a local attacker to execute arbitrary script via a crafted payload. Root cause reported across sources is insuffici...

5.4CVSS5.4AI score0.00644EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•2 views

CVE-2023-43344: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component...

5.4CVSS6.5AI score0.00644EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/10/19 12:00 a.m.•16 views

opensolution Quick CMS Cross-Site Scripting Vulnerability

OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in opensolution Quick CMS version v.6.7, which stems from a cross-site scripting XSS vulnerability in the parameter Content-Name of the component Pages Menu...

8.6CVSS5.8AI score0.00358EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/10/19 12:00 a.m.•34 views

CVE-2023-43342

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component...

5.7AI score0.00486EPSS
SaveExploits1References2
OSV
OSV
•added 2023/10/05 10:15 p.m.•14 views

CVE-2023-43343

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component...

5.4CVSS6.1AI score0.00677EPSS
SaveExploits1References2
NVD
NVD
•added 2023/10/05 10:15 p.m.•23 views

CVE-2023-43343

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component...

5.4CVSS5.5AI score0.00677EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/05 12:00 a.m.•3 views

CVE-2023-43343: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component...

5.4CVSS6.5AI score0.00677EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/10/05 12:00 a.m.•17 views

OpenSolution Quick CMS Cross-Site Scripting Vulnerability

OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in OpenSolution Quick CMS version v.6.7, which stems from a cross-site scripting XSS vulnerability in the parameter Files-Description...

5.4CVSS5.8AI score0.00677EPSS
SaveExploits1References3
CVE
CVE
•added 2023/10/05 12:00 a.m.•87 views

CVE-2023-43343

OpenSolution Quick CMS v6.7 is affected by an XSS vulnerability in the Pages Menu component through the Files - Description parameter, enabling a local attacker to execute arbitrary code via crafted script. Public details indicate no confirmed fix/version with patch; some sources suggest restrict...

5.4CVSS5.5AI score0.00677EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/05 12:00 a.m.•20 views

PT-2023-28792 · Opensolution · Opensolution Quick Cms

Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component. This enables the attacke...

5.4CVSS6.5AI score0.00677EPSS
SaveExploits1References6
NVD
NVD
•added 2021/01/28 8:15 p.m.•29 views

CVE-2020-35754

OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...

7.2CVSS7.3AI score0.10458EPSS
SaveExploits3References4
OSV
OSV
•added 2021/01/28 8:15 p.m.•19 views

CVE-2020-35754

OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...

7.2CVSS7.2AI score0.10458EPSS
SaveExploits3References4
Prion
Prion
•added 2021/01/28 8:15 p.m.•26 views

Code injection

OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...

6.5CVSS7.1AI score0.10458EPSS
SaveExploits3References4Affected Software2
Rows per page
Query Builder