Vendor
Exponentcms
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.4
Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication
Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Text Block parameters in the text editing endpoint. Attackers can inject iframe payloads with embedded …