Lucene search
+L

12346 matches found

CNNVD
CNNVD
added 2023/07/07 12:00 a.m.10 views

SimplePHPscripts Simple Forum PHP 跨站脚本漏洞

Simple Forum-Discussion System is a simple forum/discussion system. SimplePHPscripts A cross-site scripting vulnerability exists in Simple Forum PHP version 2.7, which stems from a problem with the file /preview.php that can lead to cross-site scripting...

6.1CVSS4.2AI score0.00357EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/07/06 3:15 p.m.5 views

CVE-2023-36970

A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...

5.4CVSS6.2AI score0.00584EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/06 3:15 p.m.10 views

CVE-2023-36970

A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...

5.4CVSS5.9AI score0.00584EPSS
SaveExploits1References1
NVD
NVD
added 2023/07/06 3:15 p.m.31 views

CVE-2023-36970

A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...

5.4CVSS5.4AI score0.00584EPSS
SaveExploits1References1
OSV
OSV
added 2023/07/06 3:15 p.m.9 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS5.8AI score0.49317EPSS
SaveExploits3References1
NVD
NVD
added 2023/07/06 3:15 p.m.33 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS8.9AI score0.49317EPSS
SaveExploits3References1
ATTACKERKB
ATTACKERKB
added 2023/07/06 3:15 p.m.11 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS7.4AI score0.49317EPSS
SaveExploits3References3
Prion
Prion
added 2023/07/06 3:15 p.m.24 views

Cross site scripting

A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...

4.9CVSS5.4AI score0.00584EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/07/06 3:15 p.m.25 views

Design/Logic Flaw

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

6.5CVSS8.8AI score0.49317EPSS
SaveExploits3References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/06 12:00 a.m.13 views

CVE-2023-36970

A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...

6.1AI score0.00584EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.9 views

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple v2.2.17, whic...

5.4CVSS5.7AI score0.00584EPSS
SaveExploits1References2
CVE
CVE
added 2023/07/06 12:00 a.m.126 views

CVE-2023-36969

CMS Made Simple v2.2.17 (and affected

8.8CVSS8.8AI score0.49317EPSS
SaveExploits3References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.8 views

PT-2023-25759 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.17 Description: A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the File Upload function. Recommendations: For CMS Made Simple version 2.2.17, update to a version...

5.4CVSS5.6AI score0.00584EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/07/06 12:00 a.m.44 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

9.1AI score0.49317EPSS
SaveExploits3References1
CVE
CVE
added 2023/07/06 12:00 a.m.44 views

CVE-2023-36970

CMS Made Simple 2.2.17 is affected by a Cross-site Scripting (XSS) vulnerability that can be triggered via the File Upload function, allowing an attacker to inject arbitrary web script or HTML. The issue is documented across multiple feeds (CVE-2023-36970) and described as an XSS in CMS Made Simp...

5.4CVSS5.4AI score0.00584EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.22 views

PT-2023-25757 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.17 Description: The issue allows for Remote Command Execution via the File Upload Function. Recommendations: For CMS Made Simple version 2.2.17, update to a version that fixes this issue...

8.8CVSS8.8AI score0.49317EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2023/07/06 12:00 a.m.17 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

7.4AI score0.49317EPSS
SaveExploits3References1
Patchstack
Patchstack
added 2023/07/05 12:00 a.m.12 views

WordPress Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Light Weight Social Share Tweet, Like, Share and Linkedin Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37388 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/04 12:00 a.m.18 views

WordPress Simple Giveaways Plugin <= 2.48.0 is vulnerable to Broken Access Control

Software Simple Giveaways Type Plugin Vulnerable versions = 2.48.0 Fixed in 2.48.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23893 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e25cb2d4a4a7 Credits Nguyen Anh Tien Required...

6.3AI score0.00553EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/04 12:00 a.m.12 views

WordPress Simple Site Verify Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Simple Site Verify Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36688 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e9430062ea26 Credits yuyudhn Required...

4.8CVSS5.8AI score0.00452EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder