Skip to content
OpenAdvisories

Vendor

Webedition

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.1

    Webedition CMS v2.9.8.8 Stored Cross-Site Scripting via SVG Upload

    Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG files through the media upload feature to inject and execute …