Skip to content
OpenAdvisories

Package · Packagist

nukeviet/nukeviet

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-30874

    Cross-site Scripting in NukeViet CMS

    There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02.

    nukeviet/nukeviet Packagist
  • Medium 6.1
    CVE-2020-22765

    NukeViet Cross-site Scripting via the editor in the News module

    Cross Site Scripting (XSS) vulnerability in NukeViet cms 4.4.0 via the editor in the News module.

    nukeviet/nukeviet Packagist
  • Medium 6.5
    CVE-2020-13156

    NukeViet Cross-Site Request Forgery (CSRF)

    modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=user_add URI.

    nukeviet/nukeviet Packagist
  • Medium 6.5
    CVE-2020-13157

    NukeViet Cross-Site Request Forgery (CSRF)

    modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed.

    nukeviet/nukeviet Packagist