Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/10/28 10:59 p.m.1 views

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

7.2CVSS4.7AI score0.00053EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 10:59 p.m.2 views

CVE-2025-12330

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS3.1AI score0.00035EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/28 12:31 a.m.3 views

EUVD-2025-36375

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

5.8CVSS4.6AI score0.00053EPSS
Exploits1References6
OSV
OSV
added 2025/10/27 10:15 p.m.2 views

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

7.2CVSS6.6AI score
Exploits0References5
OSV
OSV
added 2025/10/27 10:15 p.m.2 views

CVE-2025-12330

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/10/27 10:15 p.m.3 views

CVE-2025-12331

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

7.2CVSS0.00053EPSS
Exploits1References5
NVD
NVD
added 2025/10/27 10:15 p.m.4 views

CVE-2025-12330

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS0.00035EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/27 10:2 p.m.5 views

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

5.8CVSS0.00053EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 10:2 p.m.2 views

CVE-2025-12331 Willow CMS add unrestricted upload

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited...

5.8CVSS4.7AI score0.00053EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/27 10:2 p.m.6 views

CVE-2025-12330 Willow CMS Add Post add cross site scripting

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS0.00035EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 10:2 p.m.1 views

CVE-2025-12330 Willow CMS Add Post add cross site scripting

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit h...

4.8CVSS2.9AI score0.00035EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

Willow CMS 代码注入漏洞

Willow CMS is a content management system by mndeaves individual developers. A code injection vulnerability exists in Willow CMS 1.4.0 and earlier versions, which stems from an incorrect manipulation of the parameters title/body in the file /admin/articles/add, which could lead to a cross-site...

4.8CVSS4.1AI score0.00035EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.3 views

PT-2025-44058

Name of the Vulnerable Software and Affected Versions Willow CMS versions prior to 1.4.1 Description A flaw exists in Willow CMS that allows for unrestricted file uploads. This issue is present in a file located at /admin/images/add and involves an unknown function. Remote attackers can exploit...

5.8CVSS5.1AI score0.00053EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.2 views

PT-2025-44057

Name of the Vulnerable Software and Affected Versions Willow CMS versions prior to 1.4.1 Description A security flaw exists in Willow CMS that allows for cross site scripting. The issue is related to the processing of the file '/admin/articles/add' within the Add Post Page component. Manipulation...

4.8CVSS2.9AI score0.00035EPSS
Exploits1References9
Rows per page
Query Builder