Skip to content
OpenAdvisories

Vendor

Exponentcms

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.4

    Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication

    Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Text Block parameters in the text editing endpoint. Attackers can inject iframe payloads with embedded …