Lucene search
K

34 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:42 a.m.6 views

CVE-2023-48202

Cross-Site Scripting XSS vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component...

5.4CVSS5.8AI score0.00108EPSS
Exploits1
NVD
NVD
added 2024/01/27 6:15 a.m.11 views

CVE-2023-48202

Cross-Site Scripting XSS vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component...

5.4CVSS5.3AI score0.00108EPSS
Exploits1References1
OSV
OSV
added 2024/01/27 6:15 a.m.2 views

CVE-2023-48201

Cross Site Scripting XSS vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component...

5.4CVSS6.3AI score0.00124EPSS
Exploits1References1
NVD
NVD
added 2024/01/27 6:15 a.m.7 views

CVE-2023-48201

Cross Site Scripting XSS vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component...

5.4CVSS5.5AI score0.00124EPSS
Exploits1References1
OSV
OSV
added 2024/01/27 6:15 a.m.2 views

CVE-2023-48202

Cross-Site Scripting XSS vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component...

5.4CVSS5.8AI score0.00108EPSS
Exploits1References1
Prion
Prion
added 2024/01/27 6:15 a.m.9 views

Cross site scripting

Cross-Site Scripting XSS vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component...

4.9CVSS6AI score0.00108EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2024/01/27 6:15 a.m.11 views

Cross site scripting

Cross Site Scripting XSS vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component...

4.9CVSS6.6AI score0.00124EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/27 12:0 a.m.12 views

CVE-2023-48202

Cross-Site Scripting XSS vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component...

5.5AI score0.00108EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/01/27 12:0 a.m.1 views

CVE-2023-48201

Cross Site Scripting XSS vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component...

5.5AI score0.00124EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/01/27 12:0 a.m.1 views

Sunlight CMS Security Vulnerability

Sunlight CMS is a content management system from Sunlight CMS open source. A security vulnerability exists in Sunlight CMS version v.8.0.1. A remote attacker can exploit the vulnerability to execute arbitrary code and escalate privileges via a specially crafted script...

5.4CVSS8AI score0.00124EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/01/27 12:0 a.m.5 views

CVE-2023-48202

Cross-Site Scripting XSS vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component...

5.3AI score0.00108EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/01/27 12:0 a.m.1 views

Sunlight CMS Security Vulnerability

Sunlight CMS is a content management system from Sunlight CMS open source. A security vulnerability exists in Sunlight CMS version 8.0.1. An attacker exploited the vulnerability to escalate privileges via a specially crafted SVG file in the File Manager component...

5.4CVSS7.1AI score0.00108EPSS
Exploits1References2
CVE
CVE
added 2024/01/27 12:0 a.m.29 views

CVE-2023-48202

CVE-2023-48202 affects Sunlight CMS 8.0.1. An authenticated low-privileged user can escalate privileges via a crafted SVG file in the File Manager component, exploiting an XSS flaw. The vulnerability is documented across multiple feeds (NVD, Red Hat, OSV, CNNVD, etc.). Remediation guidance observ...

5.4CVSS5.3AI score0.00108EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2024/01/27 12:0 a.m.29 views

CVE-2023-48201

Sunlight CMS 8.0.1 is affected by a Cross Site Scripting (XSS) vulnerability in the Content text editor component. A remote authenticated attacker can craft a script that, when processed by the editor, may lead to arbitrary code execution and privilege escalation. The available sources consistent...

5.4CVSS5.4AI score0.00124EPSS
Exploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2023/12/14 6:39 p.m.7 views

sunlight-h.com Improper Access Control vulnerability OBB-3813679

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.1 views

PT-2023-30728 · Unknown · Sunlight Cms

Name of the Vulnerable Software and Affected Versions: Sunlight CMS version 8.0.1 Description: A Cross-Site Scripting XSS issue allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component. Recommendations: For Sunlight CMS version 8.0.1,...

5.4CVSS5.4AI score0.00108EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.1 views

PT-2023-30727 · Unknown · Sunlight Cms

Name of the Vulnerable Software and Affected Versions: Sunlight CMS version 8.0.1 Description: The issue allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component. This is a Cross Site Scripting XSS...

5.4CVSS5.9AI score0.00124EPSS
Exploits1References7
Openbugbounty
Openbugbounty
added 2022/07/25 10:5 a.m.18 views

sunlight-bg.com Cross Site Scripting vulnerability OBB-2814906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/06/04 1:33 p.m.7 views

port-sunlight-angling-club.25742.x6.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1183843 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

iSO Filer Lite 2.1.0 - Directory Traversal

No description provided by source. Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350939597?mt=8 Version: 2.1.0 Tested on:...

7.1AI score
Exploits0
Rows per page
Query Builder