Vulnerabilities > Naviwebs > Navigatecms > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-07-26 CVE-2020-23242 Cross-site Scripting vulnerability in Naviwebs Navigatecms 2.9
Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature.
network
low complexity
naviwebs CWE-79
4.8
2021-07-26 CVE-2020-23243 Cross-site Scripting vulnerability in Naviwebs Navigatecms 2.9
Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.
network
low complexity
naviwebs CWE-79
4.8
2020-08-26 CVE-2020-23657 Cross-site Scripting vulnerability in Naviwebs Navigatecms 2.9
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
network
low complexity
naviwebs CWE-79
5.4
2020-08-26 CVE-2020-23656 Cross-site Scripting vulnerability in Naviwebs Navigatecms 2.9
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."
network
low complexity
naviwebs CWE-79
5.4
2020-08-26 CVE-2020-23655 Cross-site Scripting vulnerability in Naviwebs Navigatecms 2.9
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
network
low complexity
naviwebs CWE-79
5.4
2020-08-26 CVE-2020-23654 Cross-site Scripting vulnerability in Naviwebs Navigatecms 2.9
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."
network
low complexity
naviwebs CWE-79
5.4