FeehiCMS Cross-Site Scripting Vulnerability

FeehiCMS is a Php-based CMS builder by Liufee's personal developer. feehiCMS version v2.1.1 has a security vulnerability that stems from the ability to inject carefully crafted payloads via the comment box under the single page module. No detailed vulnerability details are currently available...

Cross site scripting

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

PT-2022-25371 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS versions 2.0.1.1 and prior Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via a crafted payload injected into the Comment box under the Single Page module...

FeehiCMS 跨站脚本漏洞

FeehiCMS is a Php-based CMS builder by Liufee's personal developer. feehiCMS version v2.1.1 has a security vulnerability that stems from the ability to inject carefully crafted payloads via the comment box under the single page module. No detailed vulnerability details are currently available...

GHSA-3W22-WRWX-2R75 Typo3 XSS Vulnerability

The page module in TYPO3 before 8.7.11 has XSS via $GLOBALS'TYPO3CONFVARS''SYS''sitename', as demonstrated by an admin entering a crafted site name during the installation process...

Typo3 XSS Vulnerability

The page module in TYPO3 before 8.7.11 has XSS via $GLOBALS'TYPO3CONFVARS''SYS''sitename', as demonstrated by an admin entering a crafted site name during the installation process...

Cross-Site Scripting in Content Preview

It has been discovered that database fields used as descriptionColumn are vulnerable to cross-site scripting when their content gets previewed in the page module. A valid backend user account is needed to exploit this vulnerability...

TYPO3 cross-site scripting vulnerability (CNVD-2018-08608)

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. page module is one of the page modules. A cross-site scripting vulnerability exists in the page module in TYPO3 versions prior to 8.7.11 and 9.1.0. A remote attacker can inject...

Code injection

The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS'TYPO3CONFVARS''SYS''sitename', as demonstrated by an admin entering a crafted site name during the installation process...

WordPress Truemag Theme - Cross Site Scripting

The vulnerability is located in the "s" value of the page module GET method request. Because of this vulnerability remote attackers are able to inject own malicious script codes to the client-side of the online service web-application to compromise user session information or data. Solution Updat...

CVE-2010-2030

CVE-2010-2030 describes a Cross-Site Scripting (XSS) flaw in Drupal’s External Link Page module for versions 5.x < 5.x-1.0 and 6.x

Sql injection

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words aka keywords field...

CVE-2009-1505

CVE-2009-1505 affects the Drupal News Page module (5.x) prior to 5.x-1.2. The vulnerability is a SQL injection in the Include Words field that allows remote authenticated users (with News Page create/edit privileges) to execute arbitrary SQL commands. Underlying issue: input handling in the Keywo...

SA-CONTRIB-2009-023 - News Page - SQL injection

The News Page module provides a node content type which displays feed items from an aggregator category, filtered by keywords entered into the 'Include Words' field of the node. Unfortunately the News Page module uses keywords directly in SQL queries without being sanitized, allowing SQL injectio...