Cross-site scripting (XSS)

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-28088 · ADVISORY
• hackerone.com/reports/1119296 · WEB
• anotepad.com/note/read/s3kkk6h7 · WEB

Autres vulnérabilités de impresscms/impresscms

• CVE-2023-37785MOYENNE 4.8A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a c…
• CVE-2022-26986ÉLEVÉE 7.2SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to …
• CVE-2021-26601ÉLEVÉE 8.1ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.
• CVE-2021-26600CRITIQUE 9.8ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).
• CVE-2021-26599CRITIQUE 9.8ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.