TI-2026-31956 CVE-2026-43892
AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection
Priority MEDIUM 40
AntSword is a cross-platform website management toolkit.
Vulnerabilities
4 records
TI-2020-13467 CVE-2020-18766 · GHSA-q677-wggg-h4hr
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
Priority MEDIUM 44
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
TI-2020-15566 CVE-2020-25470 · GHSA-9mhr-wj86-g462
AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site…
Priority LOW 30
AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion.
TI-2019-10419 CVE-2019-13970 · GHSA-hq75-ggc3-8h3q
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution…
Priority LOW 31
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.