Skip to content
OpenAdvisories

Vendor

Cockpit CMS

2 known vulnerabilities.

Products

Cockpit CMS 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2024-2001

    Cross-Site Scripting vulnerability in Cockpit CMS

    A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.

    Cockpit CMS Cockpit CMS cockpit-hq/cockpit Packagist