Vulnerabilities

TI-2018-14100 CVE-2018-19902 · GHSA-g5h9-p2xf-xgw7

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.

LOW 23

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-12-31 No fix listed CWE-79

TI-2018-14099 CVE-2018-19901 · GHSA-jg9f-fqhc-vrvc

LOW 23

No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-12-31 No fix listed CWE-79

TI-2018-13368 CVE-2018-18868 · GHSA-g3v6-5f2w-pcrv

LOW 28

No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-10-31 No fix listed CWE-79