Vulnerabilities

TI-2023-26075 CVE-2023-48202 · GHSA-c2jp-pq2c-g7jh

Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated…

MEDIUM 58

Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00384 Published 2024-01-27 No fix listed CWE-79

TI-2023-26074 CVE-2023-48201 · GHSA-p899-8gh2-v29w

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote…

MEDIUM 58

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0055 Published 2024-01-27 No fix listed CWE-79

TI-2007-02685 CVE-2007-2774 · GHSA-wqh3-26vv-cwq2

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote…

LOW 39

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) _connect.php or (2) modules/startup.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03738 Published 2007-05-21 No fix listed

Vulnerabilities

Filters

Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated…

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote…

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote…