CVE-2024-28417

Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/wecmd.php...

CVE-2024-28418

Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/wecmd.php...

Webedition Security Vulnerabilities

Webedition is an open source web application framework from German company Webedition. A security vulnerability exists in Webedition CMS version 9.2.2.0, which stems from /webEdition/wecmd.php allowing file uploads...

CVE-2024-28418

Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/wecmd.php...

CVE-2024-28417

Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/wecmd.php...

CVE-2024-28418

Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/wecmd.php...

CVE-2024-28418

The Webedition CMS version 9.2.2.0 is susceptible to a File upload vulnerability via the /webEdition/we_cmd.php API endpoint. This flaw allows for the unrestricted upload of files with dangerous types (CWE-434). An attacker could potentially leverage this to upload and execute malicious files on ...

CVE-2024-28417: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/wecmd.php...

CVE-2024-28417

Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/wecmd.php...

CVE-2024-28418: Unrestricted Upload of File with Dangerous Type

Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/wecmd.php...