DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-17480)

DiliCMS is a rapid development content management system based on CodeIgniter. DiliCMS has a cross-site scripting vulnerability that can be exploited to inject web scripts and obtain sensitive information via the attachmenturl parameter of admin/index.php/setting/site?tab=siteattachment...

DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-17479)

DiliCMS is a rapid development content management system based on CodeIgniter. DiliCMS has a cross-site scripting vulnerability that can be exploited to inject web code and obtain sensitive information via the attachmenttype parameter of admin/index.php/setting/site?tab=siteattachment...

Cross site scripting

XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=siteattachment attachmenturl parameter...