| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-36491 | 3.5 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. | 2021-10-28 00:56:00 | 2021-10-22 20:15:00 |
| CVE-2020-23061 | 5.0 | Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` and `download` module which allows attackers to perform a directory traversal via a change to the path variable to request the local | 2021-10-28 00:54:00 | 2021-10-22 20:15:00 |
| CVE-2020-23054 | 4.3 | A cross-site scripting (XSS) vulnerability in NSK User Agent String Switcher Service v0.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the user agent input field. | 2021-10-28 00:49:00 | 2021-10-22 20:15:00 |
| CVE-2020-23049 | 3.5 | Fork CMS Content Management System v5.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the `Displayname` field when using the `Add`, `Edit` or `Register' functions. This vulnerability allows attackers to execute arbitrary w | 2021-10-28 00:40:00 | 2021-10-22 20:15:00 |
| CVE-2020-23046 | 4.3 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet' parameters. | 2021-10-28 00:36:00 | 2021-10-22 20:15:00 |
| CVE-2020-23044 | 3.5 | DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters. | 2021-10-28 00:33:00 | 2021-10-22 20:15:00 |
| CVE-2020-23052 | 3.5 | Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component groupfiles.php via the Number (Nombre) and Description (Descripción) parameters. | 2021-10-28 00:31:00 | 2021-10-22 20:15:00 |
| CVE-2021-26609 | 5.0 | A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulnerability allows a remote attacker to steal user inf | 2021-10-28 00:10:00 | 2021-10-26 13:15:00 |
| CVE-2021-39328 | 3.5 | The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which | 2021-10-27 22:34:00 | 2021-10-21 20:15:00 |
| CVE-2021-39356 | 3.5 | The Content Staging WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via several parameters that are echo'd out via the ~/templates/settings.php file which allowed attackers with administ | 2021-10-27 22:25:00 | 2021-10-21 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: