CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

23 matches found

RedhatCVE•added 2025/05/23 1:52 a.m.•20 views

CVE-2023-37742

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting XSS vulnerability...

6.1CVSS6.3AI score0.00472EPSS

SaveExploits0References1

attackerkb•added 2023/08/03 3:15 p.m.•12 views

CVE-2023-39096

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting XSS vulnerability due to lack of input validation and output encoding...

5.4CVSS6.1AI score0.00334EPSS

SaveExploits0References2

NVD•added 2023/08/03 3:15 p.m.•39 views

CVE-2023-39096

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting XSS vulnerability due to lack of input validation and output encoding...

5.4CVSS5.2AI score0.00334EPSS

SaveExploits0References1

Prion•added 2023/08/03 3:15 p.m.•25 views

Cross site scripting

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting XSS vulnerability due to lack of input validation and output encoding...

4.9CVSS5.2AI score0.00334EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/08/03 12:00 a.m.•48 views

CVE-2023-39096

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting XSS vulnerability due to lack of input validation and output encoding...

5.4AI score0.00334EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2023/08/03 12:00 a.m.•5 views

CVE-2023-39096: Improper Neutralization of Input During Web Page Generation

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting XSS vulnerability due to lack of input validation and output encoding...

5.4CVSS6AI score0.00334EPSS

SaveExploits0References2

Positive Technologies•added 2023/08/03 12:00 a.m.•2 views

PT-2023-26781

Name of the Vulnerable Software and Affected Versions WebBoss.io CMS version 3.7.0.1 Description The issue is related to a stored cross-site scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, which are then stored and executed by the website,...

5.4CVSS0.00334EPSS

SaveExploits0References4

Positive Technologies•added 2023/08/03 12:00 a.m.•17 views

PT-2023-26780 · Unknown · Webboss.Io Cms

Name of the Vulnerable Software and Affected Versions: WebBoss.io CMS version 3.7.0.1 Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. This occurs due to a lack of input validation and output encoding, allowing malicious scripts to be stored and executed...

5.4CVSS5AI score0.00334EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2023/08/03 12:00 a.m.•4 views

CVE-2023-39097: Improper Neutralization of Input During Web Page Generation

WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting XSS vulnerability...

5.4CVSS5.8AI score0.00334EPSS

SaveExploits0References2

NVD•added 2023/07/21 8:15 p.m.•34 views

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

7.5CVSS7.4AI score0.00583EPSS

SaveExploits0References2

attackerkb•added 2023/07/21 8:15 p.m.•9 views

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

7.5CVSS7.2AI score0.00583EPSS

SaveExploits0References3

Prion•added 2023/07/21 8:15 p.m.•30 views

Cross site request forgery (csrf)

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

5CVSS7.4AI score0.00583EPSS

SaveExploits0References2Affected Software1

OSV•added 2023/07/21 4:15 p.m.•15 views

CVE-2023-37742

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting XSS vulnerability...

6.1CVSS5.7AI score0.00472EPSS

SaveExploits0References3

NVD•added 2023/07/21 4:15 p.m.•36 views

CVE-2023-37742

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting XSS vulnerability...

6.1CVSS6.1AI score0.00472EPSS

SaveExploits0References3

CVE•added 2023/07/21 12:00 a.m.•54 views

CVE-2023-37742

The CVE-2023-37742 entry concerns WebBoss.io CMS, specifically versions prior to 3.7.0.1, which are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability stems from unvalidated or improperly escaped user input reflected back in responses, enabling a malicious user to...

6.1CVSS6AI score0.00472EPSS

SaveExploits0References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/07/21 12:00 a.m.•5 views

CVE-2023-36339: Incorrect Authorization

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

7.5CVSS7.2AI score0.00583EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2023/07/21 12:00 a.m.•3 views

CVE-2023-37742: Improper Neutralization of Input During Web Page Generation

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting XSS vulnerability...

6.1CVSS6.2AI score0.00472EPSS

SaveExploits0References2

Vulnrichment•added 2023/07/21 12:00 a.m.•13 views

CVE-2023-37742

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting XSS vulnerability...

6.3AI score0.00472EPSS

SaveExploits0References3

Vulnrichment•added 2023/07/21 12:00 a.m.•18 views

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

6.8AI score0.00583EPSS

SaveExploits0References2

Cvelist•added 2023/07/21 12:00 a.m.•53 views

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

7.6AI score0.00583EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by