Gleez CMS Vulnerable to Cross-site Scripting in media/imagecache/resize

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-16347 · ADVISORY
• gleez/cms · WEB
• gleez/cms · PACKAGE

Mais vulnerabilidades de gleez/cms

• CVE-2021-27312CRÍTICO 9.4Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive …
• CVE-2018-16704MÉDIO 4.3An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (log…
• CVE-2018-15845ALTO 8.8There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.
• CVE-2018-1999021MÉDIO 5.4Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web…
• CVE-2018-7035MÉDIO 5.4Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML conte…