CVE-2018-8078

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

CVE-2018-8078

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

CVE-2018-8078

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2018-06397 )

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site scripting vulnerability exists in YzmCMS version 3.7. A remote attacker can exploit this vulnerability by sending the 'title' parameter to the advertisement/adver/edit.html page to...

CVE-2018-8078: Improper Neutralization of Input During Web Page Generation

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

Design/Logic Flaw

QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI...

CVE-2018-8070

QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI...

CVE-2018-8070

QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI...

CVE-2018-8070

CVE-2018-8070 describes an XSS vulnerability in QCMS 3.0 triggered by the title parameter to the /guest/index.html URI. The issue is due to improper handling of user-supplied input in that parameter, enabling cross-site scripting. Multiple connected sources (Red Hat, CNVD, and others) confirm the...

CVE-2018-8070: Improper Neutralization of Input During Web Page Generation

QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI...

PT-2018-18416

Name of the Vulnerable Software and Affected Versions: QCMS version 3.0 Description: The issue is related to an XSS vulnerability. It can be exploited via the title parameter to the "/guest/index.html" URI. Recommendations: For QCMS version 3.0, update to a version that includes a fix for this...

QCMS cross-site scripting vulnerability (CNVD-2018-06392)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in QCMS version 3.0. A remote attacker can exploit this vulnerability by sending the 'title' parameter to the /guest/index.html URI to obtain a user cookie...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-02622)

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. A cross-site scripting vulnerability exists in CMS Made Simple CMSMS 2.2.5. The vulnerability can be exploited to conduct cross-site scripting attacks via the title parameter...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

Code injection

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

PT-2018-17251

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs in the admin/addbookmark.php file through the title parameter. Recommendations: For CMS Made Simple version 2.2.5, update to a...

CVE-2018-5963: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5662

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...