
CVE-2021-40910
https://notcve.org/view.php?id=CVE-2021-40910
15 Jun 2022 — There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side. Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) reflexiva en la parte de administración de PHPCMS versión V9.6.3 • https://gitee.com/phpcms/phpcms/issues/I493K8 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2019-10027
https://notcve.org/view.php?id=CVE-2019-10027
24 Mar 2019 — PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen. PHPCMS, desde la versión 9.6.x hasta la 9.6.3, tiene XSS mediante el campo mailbox (también conocido como E-mail) en la pantalla de información personal. • https://github.com/sharemice/phpcms_xss/blob/master/index.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •