Lucene search
+L

6035 matches found

OSV
OSV
added 2023/09/27 11:15 p.m.9 views

CVE-2023-43233

A stored cross-site scripting XSS vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

6.1CVSS5.9AI score0.00308EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/09/27 3:30 p.m.28 views

Subrion CMS Cross-site Scripting vulnerability in /panel/languages

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.4CVSS6.2AI score0.00495EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/09/27 3:30 p.m.10 views

GHSA-4W2J-WJ9Q-6WPX Subrion CMS Cross-site Scripting vulnerability in /panel/languages

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.4CVSS5.4AI score0.00495EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.12 views

CVE-2023-44043

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

6.1CVSS6AI score0.00482EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/27 3:19 p.m.21 views

CVE-2023-44043

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

6.1CVSS5.9AI score0.00482EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/27 3:19 p.m.22 views

CVE-2023-44043

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

6.1CVSS5.9AI score0.00482EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.6 views

CVE-2023-43828

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.4CVSS6.1AI score0.00495EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/27 3:19 p.m.8 views

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.4CVSS5.9AI score0.00316EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.14 views

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.4CVSS6.2AI score0.00316EPSS
SaveExploits0References4
NVD
NVD
added 2023/09/27 3:19 p.m.28 views

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.4CVSS5.3AI score0.00316EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/27 3:19 p.m.23 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

4.9CVSS5.3AI score0.00316EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/27 12:00 a.m.18 views

CVE-2023-43233

A stored cross-site scripting XSS vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.6AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/27 12:00 a.m.10 views

PT-2023-28739 · Yzncms · Yzncms

Name of the Vulnerable Software and Affected Versions: YZNCMS version 1.3.0 Description: A stored cross-site scripting XSS issue in the cms/content/edit component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter. This enables...

6.1CVSS6AI score0.00308EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/09/27 12:00 a.m.30 views

CVE-2023-43828

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.6AI score0.00495EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.9 views

Subrion Cross-Site Scripting Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plug-ins and more. A cross-site scripting vulnerability exists in Subrion v4.2.1, which originates from a cross-site scripting XSS...

5.4CVSS5.8AI score0.00495EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/09/27 12:00 a.m.7 views

PT-2023-29004 · Subrion · Subrion

Name of the Vulnerable Software and Affected Versions: Subrion version 4.2.1 Description: A Cross-site scripting XSS issue exists in the /panel/languages/ endpoint, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Title parameter. This enables...

5.4CVSS5.7AI score0.00495EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2023/09/27 12:00 a.m.11 views

CVE-2023-43828

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

6AI score0.00495EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.12 views

YznCMS Cross-Site Scripting Vulnerability

YznCMS is a backend development framework by Otaku Studio. A cross-site scripting vulnerability exists in YZNCMS v1.3.0, which originates from a stored cross-site scripting XSS vulnerability in the cms/content/edit component that allows an attacker to execute arbitrary web script or HTML by...

6.1CVSS5.5AI score0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/27 12:00 a.m.18 views

CVE-2023-43828

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

6.2AI score
SaveExploits0References3
Cvelist
Cvelist
added 2023/09/27 12:00 a.m.34 views

CVE-2023-43233

A stored cross-site scripting XSS vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

6AI score0.00308EPSS
SaveExploits0References1
Rows per page
Query Builder