Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wayang-cms Project Component: Wayang-cms Clear all filters
TI-2020-17579 CVE-2020-29146 · GHSA-64jr-p2cv-jv7x

A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows…

Priority LOW 28

A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-07-14 No fix listed CWE-79