Vulnerabilities > NO CMS Project
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-12-31 | CVE-2018-19902 | Cross-site Scripting vulnerability in No-Cms Project No-Cms 1.1.3 No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter. | 4.8 |
2018-12-31 | CVE-2018-19901 | Cross-site Scripting vulnerability in No-Cms Project No-Cms 1.1.3 No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter. | 4.8 |
2018-10-31 | CVE-2018-18868 | Cross-site Scripting vulnerability in No-Cms Project No-Cms 1.1.3 No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter. | 6.1 |