8 matches found
CVE-2024-28418
Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/wecmd.php...
CVE-2024-28417
Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/wecmd.php...
Webedition Security Vulnerabilities
Webedition is an open source web application framework from German company Webedition. A security vulnerability exists in Webedition CMS version 9.2.2.0, which stems from /webEdition/wecmd.php allowing file uploads...
CVE-2024-28417
Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/wecmd.php...
CVE-2024-28417
Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/wecmd.php...
CVE-2024-28418
Webedition CMS version 9.2.2.0 is vulnerable to a File upload vulnerability via the /webEdition/we_cmd.php API endpoint. This flaw allows for unauthorized file uploads, which can lead to significant security risks. As a temporary workaround, it is recommended to restrict access to the /webEdition...