Vulnerabilities > Bigtreecms > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-01 | CVE-2023-44954 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS 4.5.7 Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute arbitrary code via the ID parameter in the Developer Settings functions. | 5.4 |
| 2022-08-03 | CVE-2022-36197 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS 4.4.16 BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PDF file. | 5.4 |
| 2021-08-26 | CVE-2020-18467 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS 4.4.3 Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP request to admin/tags/create. | 5.4 |
| 2021-06-01 | CVE-2020-26669 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update. | 5.4 |
| 2018-10-19 | CVE-2018-18380 | Session Fixation vulnerability in Bigtreecms Bigtree CMS A Session Fixation issue was discovered in Bigtree before 4.2.24. | 5.4 |
| 2018-10-16 | CVE-2018-18308 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS 4.2.23 In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload area). | 6.1 |
| 2018-06-26 | CVE-2018-1000521 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS 4.2.21 BigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result in The low-privileged users can use this vulnerability to attack high-privileged(Developer) users.. | 6.1 |
| 2018-04-30 | CVE-2018-10364 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS BigTree before 4.2.22 has XSS in the Users management page via the name or company field. | 5.4 |
| 2018-04-17 | CVE-2018-10183 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS 4.2.22 An issue was discovered in BigTree 4.2.22. | 6.1 |
| 2018-01-23 | CVE-2018-6013 | Cross-site Scripting vulnerability in Bigtreecms Bigtree CMS 4.2.19 Cross-site scripting (XSS) in BigTree 4.2.19 allows any remote users to inject arbitrary web script or HTML via the directory parameter. | 5.4 |