TI-2025-14093 CVE-2025-15452 · GHSA-v2jh-chh6-cf52
xnx3 wangmarket Backend Variable Search variableList.do variableList cross site scripting
Priority MEDIUM 55
A weakness has been identified in xnx3 wangmarket up to 4.9.
Vulnerabilities
8 records
TI-2025-14092 CVE-2025-15451 · GHSA-mp3x-hgj4-gx83
xnx3 wangmarket System Variables variableSave.do cross site scripting
Priority MEDIUM 55
A security flaw has been discovered in xnx3 wangmarket up to 4.9.
TI-2025-14060 CVE-2025-15416 · GHSA-p5wf-p25w-3c2h
xnx3 wangmarket Add Global Variable save.do cross site scripting
Priority MEDIUM 55
A vulnerability was found in xnx3 wangmarket up to 6.4.
TI-2025-14059 CVE-2025-15415 · GHSA-rm9v-363r-mcp3
xnx3 wangmarket XML File uploadImage.do uploadImage unrestricted upload
Priority MEDIUM 56
A vulnerability has been found in xnx3 wangmarket up to 6.4.
TI-2025-19133 CVE-2025-25770 · GHSA-5429-63wr-8cgm
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF)…
Priority HIGH 65
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
TI-2025-19132 CVE-2025-25769 · GHSA-4mp4-36x3-25jw
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF)…
Priority LOW 36
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.
TI-2023-06291 CVE-2023-6886 · GHSA-3x3w-849q-423v
xnx3 wangmarket Role Management Page code injection
Priority MEDIUM 44
A vulnerability was found in xnx3 wangmarket 6.1.
TI-2023-11785 CVE-2023-26813 · GHSA-pm69-3c84-x6h6
SQL injection vulnerability in…
Priority HIGH 82
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName param…