3 matches found
CMS ISWEB Cross-Site Scripting Vulnerability
CMS ISWEB is a content management system CMS. A cross-site scripting vulnerability exists in the index.php file in CMS ISWEB version 3.5.3. A remote attacker can inject arbitrary web scripts or code with the help of the 'ordineRis', 'sezioneRicerca' or 'ogettiRicerca' parameter. parameter...
6.1CVSS6.1AI score0.00978EPSS
SaveExploits2References1
CVE-2018-15562
CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php...
6.1CVSS5.8AI score0.00978EPSS
SaveExploits2References1
CVE-2018-15562: Improper Neutralization of Input During Web Page Generation
CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php...
6.1CVSS6.3AI score0.00978EPSS
SaveExploits2References2
20