Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Classcms Project Component: Classcms Clear all filters
TI-2024-06431 CVE-2024-6932 · GHSA-hvqc-vj9x-r2qv

ClassCMS cross site scripting

Priority MEDIUM 57

A vulnerability was found in ClassCMS 4.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-07-20 No fix listed CWE-79
TI-2022-09179 CVE-2022-25582 · GHSA-qc5g-r854-82rg

A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5…

Priority LOW 25

A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2022-03-25 No fix listed CWE-79