CVE-2019-10238

Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter...

CVE-2019-10238: Improper Neutralization of Input During Web Page Generation

Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter...

PT-2019-11650

Name of the Vulnerable Software and Affected Versions: Sitemagic CMS version 4.4 Description: The issue concerns a security problem where an attacker can inject malicious code. This is achieved through the filename parameter in the SMFiles/FrmUpload.class.php file. Recommendations: For Sitemagic...