Nucleus Cms@3.70 Security Vulnerabilities and Issues — Nucleus Cms@3.70 CVE List

Lucene search

NucleuscmsNucleus Cms3.70

2 matches found

CVE•added 2015/07/08 3:59 p.m.•30 views

CVE-2015-5454

Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item.

4.3CVSS5.8AI score0.00506EPSS

CVE•added 2018/12/10 7:29 p.m.•25 views

CVE-2018-16636

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

6.5CVSS6.6AI score0.00261EPSS