Vulnerabilities

TI-2008-01876 CVE-2008-1953 · GHSA-p33g-rrvf-2fpx

Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template…

LOW 22

Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-04-25 No fix listed CWE-79

TI-2008-00669 CVE-2008-0701 · GHSA-732p-4r7p-jxmm

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during…

LOW 25

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01186 Published 2008-02-12 No fix listed CWE-264

TI-2005-04104 CVE-2005-4361 · GHSA-34x5-g49j-7c65

Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management…

LOW 24

Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01739 Published 2005-12-20 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template…

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during…

Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management…