No-cms Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

No-cms Project records in CISA KEV

No No-cms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in No-cms · all components

TI-2018-13368 CVE-2018-18868 · GHSA-g3v6-5f2w-pcrv

LOW 28

No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-10-31 No fix listed CWE-79

TI-2018-14100 CVE-2018-19902 · GHSA-g5h9-p2xf-xgw7

LOW 23

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-12-31 No fix listed CWE-79

TI-2018-14099 CVE-2018-19901 · GHSA-jg9f-fqhc-vrvc

LOW 23

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-12-31 No fix listed CWE-79