Vulnerabilities > NO CMS Project

DATE CVE VULNERABILITY TITLE RISK
2018-12-31 CVE-2018-19902 Cross-site Scripting vulnerability in No-Cms Project No-Cms 1.1.3
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.
network
low complexity
no-cms-project CWE-79
4.8
2018-12-31 CVE-2018-19901 Cross-site Scripting vulnerability in No-Cms Project No-Cms 1.1.3
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.
network
low complexity
no-cms-project CWE-79
4.8
2018-10-31 CVE-2018-18868 Cross-site Scripting vulnerability in No-Cms Project No-Cms 1.1.3
No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.
network
low complexity
no-cms-project CWE-79
6.1