Skip to content
OpenAdvisories

Product · Kuicms

Kuicms Php EE

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2

    Kuicms Php EE 2.0 Persistent Cross-Site Scripting via bbs reply

    Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint. Attackers can send POST requests to /web/?c=bbs&a=reply …