Lucene search
+L

6 matches found

osv_bit
osv_bit
•added 2024/03/06 10:58 a.m.•110 views

BIT-NEOS-2022-30429

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

5.4CVSS5.8AI score0.00602EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2022/06/03 12:00 a.m.•46 views

GHSA-7M9H-V68W-PFW3 Neos CMS vulnerable to XSS in various backend modules

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/06/02 6:15 p.m.•9 views

CVE-2022-30429

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

5.4CVSS6AI score0.00602EPSS
SaveExploits1References5
Mend
Mend
•added 2022/06/02 5:18 p.m.•16 views

CVE-2022-30429

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

5.4CVSS0.00602EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/02 12:00 a.m.•6 views

CVE-2022-30429: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

5.4CVSS5.9AI score0.00602EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/02 12:00 a.m.•13 views

PT-2022-20114 · Neos Cms · Neos Cms

Name of the Vulnerable Software and Affected Versions: Neos CMS versions 3.3.29 through 8.0.1 Description: Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion o...

5.4CVSS5.4AI score0.00602EPSS
SaveExploits1References9
Rows per page
Query Builder