Skip to content
OpenAdvisories

Vendor

Vox Media

1 known vulnerabilities.

Products

Chorus CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2025-40730

    HTML injection in Vox Media's Chorus CMS

    HTML injection in Vox Media's Chorus CMS. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the 'q' parameter in '/search'. This vulnerability can be exploited to steal sensitive use…

    Vox Media Chorus CMS