WCMS path traversal vulnerability

WCMS is a content management system CMS that uses an open web interface to build websites. A directory traversal vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to read arbitrary files on the server running the application via the path parameter of wex/cssjs.php...

WCMS cross-site scripting vulnerabilities

WCMS is a content management system CMS that uses an open web interface to build websites. A reflective cross-site scripting vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to inject arbitrary web script and HTML via the type parameter of wex/cssjs.php...