3 matches found
PT-2024-21784 · Cigesv2 · Cigesv2
Name of the Vulnerable Software and Affected Versions: CIGESv2 system affected versions not specified Description: The issue allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message. This is due to an HTML injection vulnerability affecting the...
6.1CVSS7.4AI score0.00309EPSS
SaveExploits0References4
PT-2021-14497 · Grav · Grav Admin Plugin
Name of the Vulnerable Software and Affected Versions: Grav Admin Plugin versions 1.10.7 and earlier Description: The issue allows an unauthenticated user to execute certain methods of the administrator controller without credentials, resulting in arbitrary YAML file creation or modification. Thi...
9.8CVSS9.5AI score0.806EPSS
SaveExploits12References12
20