CVE-2020-36051

Directory traversal vulnerability in pageedit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter...

CVE-2020-19885

DBHcms v1.2.0 is affected by a stored XSS vulnerability in dbhcms/mod/mod.page.edit.php line 227 due to missing htmlspecialchars handling for $_POST['pageparam_insert_name']. Exploitation requires an authenticated admin user, which could allow hijacking other users. The available connected docume...