Navigatecms@2.9 Security Vulnerabilities and Issues — Navigatecms@2.9 CVE List

Lucene search

NaviwebsNavigatecms2.9

7 matches found

CVE•added 2020/06/15 1:15 a.m.•53 views

CVE-2020-14067

The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php.

9.8CVSS9.4AI score0.00433EPSS

CVE•added 2021/07/26 9:15 p.m.•42 views

CVE-2020-23242

Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature.

4.8CVSS4.9AI score0.0029EPSS

CVE•added 2021/07/26 9:15 p.m.•41 views

CVE-2020-23243

Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.

4.8CVSS4.9AI score0.00212EPSS

CVE•added 2020/08/26 5:15 p.m.•31 views

CVE-2020-23655

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."

5.4CVSS5.3AI score0.00206EPSS

CVE•added 2020/08/26 5:15 p.m.•28 views

CVE-2020-23657

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."

5.4CVSS5.3AI score0.00206EPSS

CVE•added 2020/08/26 5:15 p.m.•27 views

CVE-2020-23654

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."

5.4CVSS5.3AI score0.00206EPSS

CVE•added 2020/08/26 5:15 p.m.•27 views

CVE-2020-23656

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."

5.4CVSS5.3AI score0.00206EPSS