CrownZTX/vulnerabilities

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-30950 ↗	Apr 17, 2024Wednesday, 17 April 2024, 19:15	3.5 LOW	—
A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php.
CVE-2024-30953 ↗	Apr 17, 2024Wednesday, 17 April 2024, 19:15	6.1 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module.
CVE-2024-30951 ↗	Apr 17, 2024Wednesday, 17 April 2024, 18:15	6.1 MEDIUM	—
FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php.
CVE-2024-30952 ↗	Apr 17, 2024Wednesday, 17 April 2024, 13:15	6.1 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in PESCMS-TEAM v2.3.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the domain input field under /youdoamin/?g=Team&m=Setting&a=action.
CVE-2023-46058 ↗	Oct 24, 2023Tuesday, 24 October 2023, 00:15	4.8 MEDIUM	—
Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grp_desc parameter of the admin/group.php component.
CVE-2023-46059 ↗	Oct 24, 2023Tuesday, 24 October 2023, 00:15	4.8 MEDIUM	—
Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the Service, and website URL to Ping parameters of the admin/trackback.php component.