CVE-2021-3355

Mô tả

Tham khảo

• packetstormsecurity.com/files/161562/LightCMS-1.3.4-Cross-Site-Scripting.html · Exploit
• gist.github.com/Peithon/1c628ded0c4fc96c6331c3cce1d0c69b · Exploit
• eddy8/LightCMS · Exploit
• exploit-db.com/exploits/49598 · Exploit

Lỗ hổng khác của lightcms

• CVE-2026-29934TRUNG BÌNH 6.1A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Ja…
• CVE-2024-22559TRUNG BÌNH 5.4LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field.
• CVE-2023-27060NGHIÊM TRỌNG 9.8LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function.
• CVE-2022-33009TRUNG BÌNH 4.8A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploadin…
• CVE-2021-27112NGHIÊM TRỌNG 9.8LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading o…