Omni Cms Security Vulnerabilities and Issues — Omni Cms CVE List

Lucene search

ModerncampusOmni Cms

4 matches found

CVE•added 2024/06/13 4:15 p.m.•51 views

CVE-2023-35859

A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters.

6.1CVSS5.7AI score0.00267EPSS

CVE•added 2022/09/18 5:15 a.m.•44 views

CVE-2022-40766

Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - ,

9.8CVSS9.7AI score0.00344EPSS

CVE•added 2024/06/13 4:15 p.m.•43 views

CVE-2023-35860

A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.

5.3CVSS6.8AI score0.02635EPSS

CVE•added 2024/06/13 4:15 p.m.•32 views

CVE-2023-35858

XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information.

5.3CVSS7.4AI score0.00542EPSS