CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2020-20696

2021-10-01

N/A

5.4 MEDIUM

A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.

CVE-2020-20695

2021-10-01

N/A

5.4 MEDIUM

A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.

CVE-2020-20693

2021-10-01

N/A

8.8 HIGH

A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.

CVE-2020-20692

2021-10-01

N/A

7.2 HIGH

GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.

CVE-2020-20691

2021-10-08

N/A

6.5 MEDIUM

An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.

CVE-2020-2069

2022-12-30

N/A

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVE-2020-2068

2022-12-30

N/A

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVE-2020-20675

2021-08-27

N/A

9.8 CRITICAL

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/.

CVE-2020-20672

2021-09-23

N/A

7.8 HIGH

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.

CVE-2020-20671

2021-09-24

N/A

8.8 HIGH

A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.

« Previous 1 … 4,199 4,200 4,201 4,202 4,203 … 11,258 Next »