Vendor
Webedition
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.1
Webedition CMS v2.9.8.8 Stored Cross-Site Scripting via SVG Upload
Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG files through the media upload feature to inject and execute …