Skip to content
OpenAdvisories

Vendor

wbce-cms

2 known vulnerabilities.

Products

WBCE CMS 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-53910

    WBCE CMS 1.6.1 Stored Cross-Site Scripting via Page Content

    WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by inserting script tags into page content through the WYSIWYG editor. Attackers can submit POST requests to /wbce/modules/w…

    wbce-cms WBCE CMS
  • Medium 5.4
    CVE-2023-53909

    WBCE CMS 1.6.1 SVG File Content Cross-Site Scripting

    WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by uploading crafted SVG files through the media manager. Attackers can upload SVG files containing script tags to the /wbce…

    wbce-cms WBCE CMS