Page 3 of 24 results (0.003 seconds)

CVSS: 4.8EPSS: 1%CPEs: 1EXPL: 3

CVE-2018-10321 – Frog CMS 0.9.5 - Persistent Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2018-10321

24 Apr 2018 — Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. Frog CMS 0.9.5 tiene una vulnerabilidad de Cross-Site Scripting (XSS) persistente mediante "Admin Site title" en Settings. Frog CMS version 0.9.5 suffers from a persistent cross site scripting vulnerability. • https://packetstorm.news/files/id/147398 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-10318

https://notcve.org/view.php?id=CVE-2018-10318

24 Apr 2018 — Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata. Frog CMS 0.9.5 tiene Cross-Site Scripting (XSS) mediante el parámetro admin/?/page/edit page[keywords], también conocido como Edit Page Metadata. • https://github.com/philippe/FrogCMS/issues/6 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-10319

https://notcve.org/view.php?id=CVE-2018-10319

24 Apr 2018 — Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet. Frog CMS 0.9.5 tiene Cross-Site Scripting (XSS) mediante el parámetro admin/?/snippet/edit snippet[name], también conocido como Edit Snippet. • https://github.com/philippe/FrogCMS/issues/7 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-10320

https://notcve.org/view.php?id=CVE-2018-10320

24 Apr 2018 — Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout. Frog CMS 0.9.5 tiene Cross-Site Scripting (XSS) mediante el parámetro admin/?/layout/edit layout[name], también conocido como Edit Layout. • https://github.com/philippe/FrogCMS/issues/8 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •