CWE-79

CVE-2018-16632

February 26, 2023 by

Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/.

February 26, 2023 by

Pluck v4.7.7 allows XSS via the admin.php?action=editpage&page= page title.

February 26, 2023 by

Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php.

February 26, 2023 by

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

February 26, 2023 by

Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.

February 26, 2023 by

Evolution CMS 1.4.x allows XSS via the manager/ search parameter.