Ed01-Cms 跨站脚本漏洞

ED01-CMS is a content management system. A cross-site scripting vulnerability exists in the sposts.php component of ED01-CMS 1.0, which can be exploited by attackers to execute arbitrary web scripts or HTML by inserting specially crafted loads into the Post title or Post content fields...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

htmly 跨站脚本漏洞

htmly is a simple and fast database-free PHP blogging platform and flat file CMS. htmly version 2.8.1 has a vulnerability in the "content" field of the "regular post" page in the "add content" menu of the dashboard. field of the "add content" menu in the dashboard is vulnerable to a stored...

CVE-2020-19618

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

CVE-2020-19618

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

Cross site scripting

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

CVE-2020-19618

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

PT-2021-10376

Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: A Cross Site Scripting XSS issue exists, allowing attackers to inject malicious scripts via the post content field to the "/post/editing" API endpoint. Recommendations: For mblog version 3.5, update the post...

CVE-2020-19618: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor CMS 0.12.7 is affected by an XSS vulnerability that allows an admin (privileged user) to inject crafted post content, triggering script execution in other users’ browsers. The issue is described across multiple sources as a cross-site scripting flaw stemming from the post creation feature;...

CVE-2020-12071: Improper Neutralization of Input During Web Page Generation

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

Cross-site Scripting

Anch allows admins to cause XSS via crafted post content...

PT-2020-13024

Name of the Vulnerable Software and Affected Versions Anchor version 0.12.7 Description The issue allows admins to cause cross-site scripting XSS via crafted post content. Recommendations For Anchor version 0.12.7, consider restricting the ability of admins to post crafted content until a fix is...

CVE-2015-4039

Multiple cross-site scripting XSS vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via unspecified 1 profile fields or 2 new post content. NOTE: CVE-2015-4038 can be used to bypass the administrator confirmatio...

CVE-2015-4039: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via unspecified 1 profile fields or 2 new post content. NOTE: CVE-2015-4038 can be used to bypass the administrator confirmatio...

PT-2020-7841

Name of the Vulnerable Software and Affected Versions: WP Membership plugin version 1.2.3 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified profile fields or new post content, potentially leading to cross-site scripting XSS attacks. Th...