5463 matches found
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
CVE-2022-34121
Cuppa CMS v1.0 is vulnerable to a local file inclusion (LFI) through the component /templates/default/html/windows/right.php . The issue, described across sources, enables unauthorized access and disclosure of sensitive information, with potential remote code execution implied by some references....
CVE-2022-31181
creationtimestamp| type| source ---|---|--- 2022-07-26 06:00:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2777 2022-07-28 07:16:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2788 2022-08-02 00:17:27+00:00| seen| https://t.me/cibsecurity/47383 2025-10-10...
CVE-2021-40149
creationtimestamp| type| source ---|---|--- 2022-07-26 04:30:44+00:00| seen| https://t.me/cibsecurity/46408 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40149.yaml 2026-09-01 20:01:37+00:00| seen|...
GHSA-XQCF-HJ92-967M Django REST framework XSS Vulnerability
Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...
Django REST framework XSS Vulnerability
Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...
CVE-2018-25045
Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...
UBUNTU-CVE-2018-25045
Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...
CVE-2022-36131
The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...
CVE-2022-36131
The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...
Cross site scripting
The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...
CVE-2022-36131
The CVE-2022-36131 entry concerns the Better PDF Exporter add-on for Atlassian Jira (version 10.0.0). Affected component: PDF Templates overview page description storage. Root cause: stored cross-site scripting (XSS) via a crafted description can be injected and rendered. Reported impact indicate...
CVE-2022-36131
The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...
Remote Code Execution (RCE)
winter/storm is vulnerable to Remote Code Execution. An authenticated attacker with permission to to create or modify theme templates with the cms editor can disable the cms.enableSafeMode feature, allowing for the modification of the backend.php code through the web interface...
CVE-2022-28666
creationtimestamp| type| source ---|---|--- 2022-07-21 20:18:24+00:00| seen| https://t.me/cibsecurity/46763 2025-11-29 20:35:02+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2022-28666.yaml 2025-12-01 21:02:33+00:00| seen|...
Remote Code Execution (RCE)
winter/storm is vulnerable to Remote Code Execution. An authenticated attacker with permission to create or modify theme templates with the cms editor can disable the cms.enableSafeMode feature, allowing for the modification of the backend php code through the web interface...
CVE-2022-2168
creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:41+00:00| seen| https://t.me/cibsecurity/46384 2025-04-06 08:48:29+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2168.yaml...
