Vulnerabilities

TI-2014-07200 CVE-2014-8772 · GHSA-9p76-42q7-9xch

Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and…

LOW 18

Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00777 Published 2014-12-03 No fix listed CWE-79

TI-2014-07199 CVE-2014-8771 · GHSA-rfgw-qj68-fh53

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00612 Published 2014-12-03 No fix listed CWE-352

TI-2011-04528 CVE-2011-5255 · GHSA-347x-pmh7-x2qr

Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) username, or (3) password paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01666 Published 2013-01-31 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and…

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS…

Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and…