PluXml 跨站脚本漏洞

PluXml is a free and open source content management system that does not require a database to work. A security vulnerability exists in PluXml v5.8.7 that allows an attacker to execute arbitrary web script or HTML via a crafted payload in the content and thumbnail parameters...

PluXml 安全漏洞

PluXml is a free and open source content management system that does not require a database to work. PluXml v5.8.7 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML via a carefully crafted payload in the author's...

PluXml 安全漏洞

PluXml is a free and open source content management system that does not require a database to work. PluXml suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML...

The vulnerability of the core/admin/profil.php function in the PluXML content management system allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the core/admin/profil.php function in the PluXML content management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protecte...

PluXML 5.8.7 Cross Site Scripting

Exploit Title: XSS-Stored on PluXML 5.8.7 - latest parameter "idcontent" Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.13.2021 Vendor: https://pluxml.org/ Link: https://sourceforge.net/projects/chikitsa/ CVE: CVE-2021-38603 + Exploit Source: !/usr/bin/python3 Author:...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

UBUNTU-CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

Cross site scripting

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

Cross site scripting

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

UBUNTU-CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38603

Removed by vendor...

CVE-2021-38603

CVE-2021-38603 affects PluXML 5.8.7. The stored XSS vulnerability is in core/admin/profil.php via the Information field (parameter ID: id_content per public exploit). Underlying issue: stored cross-site scripting that could allow an attacker to inject arbitrary script when data is stored in Infor...