Lucene search

K
CszcmsCsz Cms1.3.0

7 matches found

CVE
CVE
added 2023/09/06 8:15 p.m.85 views

CVE-2023-41601

Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters.

6.1CVSS6AI score0.00181EPSS
CVE
CVE
added 2024/02/16 2:15 a.m.59 views

CVE-2024-25414

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.

9.8CVSS7.7AI score0.035EPSS
CVE
CVE
added 2024/03/01 5:15 p.m.59 views

CVE-2024-27734

A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary code via a crafted script to the Site Name fields of the Site Settings component.

6.1CVSS7AI score0.00101EPSS
CVE
CVE
added 2024/04/19 4:15 p.m.47 views

CVE-2024-27752

Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the Default Keyword field in the settings function.

5.4CVSS7.3AI score0.0064EPSS
CVE
CVE
added 2023/08/18 7:15 p.m.41 views

CVE-2023-38911

A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields.

5.4CVSS5.4AI score0.00123EPSS
CVE
CVE
added 2023/08/18 7:15 p.m.33 views

CVE-2023-38910

CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered in the 'Carousel Wiget' section and choosing our carousel widget created above, in 'Photo URL' and 'YouTube URL' plugin.

6.1CVSS6AI score0.00212EPSS
CVE
CVE
added 2023/08/22 7:16 p.m.25 views

CVE-2023-39599

Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter.

5.4CVSS5.3AI score0.00236EPSS