4 matches found
Cross site scripting
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...
4.3CVSS6AI score0.00826EPSS
SaveExploits1References1Affected Software1
CVE-2019-9595
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...
6AI score0.00826EPSS
SaveExploits1References1
PT-2019-19735
Name of the Vulnerable Software and Affected Versions AppCMS version 2.0.101 Description The issue allows for XSS via the params parameter in the "upload/callback.php" endpoint. Recommendations For AppCMS version 2.0.101, update to a newer version that contains a fix for this issue...
6.1CVSS0.00826EPSS
SaveExploits1References3
20