CWE-79

CVE-2018-16625

February 26, 2023 by

index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.

February 26, 2023 by

index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name.

February 26, 2023 by

panel/login in Kirby v2.5.12 allows XSS via a blog name.

February 26, 2023 by

panel/uploads/#elf_l1_XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.

February 26, 2023 by

Kirby v2.5.12 allows XSS by using the “site files” Add option to upload an SVG file.

February 26, 2023 by

Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter.