Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: W-cms Clear all filters
TI-2012-05241 CVE-2012-6523 · GHSA-rjxg-q6rx-6v3h

Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via (1) the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01879 Published 2013-01-31 No fix listed CWE-79