8204 matches found
MRCMS code injection vulnerability
MRCMS is a content management system by marker personal developer. A code injection vulnerability exists in MRCMS version 3.1.2, which stems from improper manipulation of the parameter Title in the component Edit Article Page, which could lead to a cross-site scripting attack...
CVE-2025-4323: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has...
CVE-2025-4024
A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /adddrive.php. The manipulation of the argument drivetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
ITSsourcecode Placement Management System injection vulnerability
itsourcecode Placement Management System is an open source placement management system by itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter drivetitle in...
CVE-2025-3961
A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
Books-Management-System Code Injection Vulnerability
Books-Management-System is a book management system by withstars individual developers. A code injection vulnerability exists in Books-Management-System version 1.0, which originates from cross-site scripting due to a misbehavior of the Title parameter in the file /admin/article/add/do...
PT-2025-17985 · Withstars · Books-Management-System
Name of the Vulnerable Software and Affected Versions: withstars Books-Management-System version 1.0 Description: A vulnerability has been found in withstars Books-Management-System. This affects an unknown part of the file "/admin/article/add/do". The manipulation of the argument Title leads to...
CVE-2025-3961: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...
Python-markdownify security vulnerabilities
python-markdownify is a tool for converting HTML to Markdown by Matthew Dapena-Tretter, an individual developer. A security vulnerability exists in python-markdownify versions prior to 0.14.1, which stems from support for oversized title prefixes, which may lead to memory consumption...
OpenCMS Cross-Site Scripting vulnerability
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field...
Cross-site Scripting (XSS)
Overview org.opencms:opencms-core is a Java open source content management system by Alkacon Software. Affected versions of this package are vulnerable to Cross-site Scripting XSS in Create/Modify article function via the image title sub-field in the image field. Details Cross-site scripting or X...
GHSA-H75C-F2XX-9VXV OpenCMS Cross-Site Scripting vulnerability
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field...
CVE-2024-42699
The Alkacon OpenCMS content management system is vulnerable to Cross-Site Scripting (XSS) in the Create/Modify article function. Specifically, the org.opencms:opencms-core component (versions >=8.0.1 and
Alkacon OpenCMS security vulnerabilities
Alkacon OpenCMS is a content management system from Alkacon Inc. A security vulnerability exists in Alkacon OpenCMS version 17.0, which stems from cross-site scripting in the title subfield of the image field in the Create/Modify article function, which could lead to the injection of a javascript...
CVE-2024-42699
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field...
CVE-2024-42699: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field...
PT-2025-17349 · WordPress +1 · Order Delivery Date +1
Name of the Vulnerable Software and Affected Versions: Order Delivery Date WordPress plugin versions prior to 12.6.0 Description: The Order Delivery Date WordPress plugin before version 12.6.0 discloses arbitrary post titles including draft and private posts through an unauthenticated AJAX action...
CVE-2025-29181
FOXCMS = V1.25 is vulnerable to SQL Injection via $param'title' in /admin/util/Field.php...
