DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-17480)

DiliCMS is a rapid development content management system based on CodeIgniter. DiliCMS has a cross-site scripting vulnerability that can be exploited to inject web scripts and obtain sensitive information via the attachmenturl parameter of admin/index.php/setting/site?tab=siteattachment...

DiliCMS Cross-Site Scripting Vulnerability (CNVD-2019-17479)

DiliCMS is a rapid development content management system based on CodeIgniter. DiliCMS has a cross-site scripting vulnerability that can be exploited to inject web code and obtain sensitive information via the attachmenttype parameter of admin/index.php/setting/site?tab=siteattachment...

Cross site scripting

XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=siteattachment attachmenturl parameter...

PT-2018-14371

Name of the Vulnerable Software and Affected Versions DiliCMS version 2.4.0 Description A security issue exists due to the presence of XSS in the attachment url parameter of the "admin/index.php/setting/site?tab=site attachment" endpoint. Recommendations For DiliCMS version 2.4.0, avoid using the...

PT-2018-14369

Name of the Vulnerable Software and Affected Versions DiliCMS version 2.4.0 Description A security issue exists due to the presence of XSS in the attachment type parameter of the "admin/index.php/setting/site?tab=site attachment" endpoint. Recommendations For DiliCMS version 2.4.0, avoid using th...