CVE-2017-2124

The CVE-2017-2124 entry affects OneThird CMS v1.73 Heaven’s Door and earlier. A cross-site scripting vulnerability exists in contact.php, allowing remote attackers to inject arbitrary web script or HTML via a crafted inquiry form submission. The root cause is improper handling in the inquiry form...

CVE-2017-2123

CVE-2017-2123 is a cross-site scripting (CWE‑79) vulnerability affecting OneThird CMS v1.73 Heaven’s Door and earlier, exploitable via language.php to execute arbitrary scripts in a user’s browser. Public sources (JVN/JVNDB, NVD) confirm the impact as arbitrary script execution and recommend upda...