OoLs5/VulDiscovery

OoLs5/VulDiscovery

Releases0

Stars2

Persional vulDiscovery

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-41614 ↗	Aug 13, 2024Tuesday, 13 August 2024, 17:15	4.8 MEDIUM	—
symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles.
CVE-2024-41613 ↗	Aug 13, 2024Tuesday, 13 August 2024, 17:15	5.4 MEDIUM	—
A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note.
CVE-2024-36773 ↗	Jun 7, 2024Friday, 7 June 2024, 15:15	4.8 MEDIUM	—
A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Themes parameter at index.php.
CVE-2024-36774 ↗	Jun 6, 2024Thursday, 6 June 2024, 22:15	7.2 HIGH	—
An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVE-2024-36775 ↗	Jun 6, 2024Thursday, 6 June 2024, 22:15	5.4 MEDIUM	—
A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the About Me parameter in the Edit Profile page.