Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.
Vendor
lg vulnerabilities
66 published CVES affecting lg, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 66
- Critical
- 25
- High
- 29
- Medium
- 12
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Products
- Simple Editor 25
- supersign cms 8
- webOS 8
- lg led assistant 6
- SuperSign Media Editor 2
- webos signage 2
- bridge 1
- gamp-7100 firmware 1
- gapm-7200 firmware 1
- gapm-8000 firmware 1
- ipsfullhd 1
- l-03e 1
- l-04d 1
- l-09c 1
- lg mobile 1
- lg ultrawide 1
- lgpcsuite setup 1
- lha.sys 1
- lnb5110 firmware 1
- lnb5320 firmware 1
- lnb5320r firmware 1
- lnb7210 firmware 1
- lnd3230r firmware 1
- lnd5110 firmware 1
- lnd5110r firmware 1
- lnd5220r firmware 1
- lnd7210 firmware 1
- lnd7210r firmware 1
- lnu3230r firmware 1
- lnu5110r firmware 1
Latest lg CVEs
Newest publication first · page 1 of 3
-
MediumCVSS 4.8 EPSS 0.25%
-
MediumCVSS 4.8 EPSS 0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.
-
MediumCVSS 4.8 EPSS 0.25%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSign CMS: from 4.1.3 before < 4.3.1.
-
HighCVSS 7.5 EPSS 2.5%
LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required...
-
MediumCVSS 5.3 EPSS 2.1%
LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
-
HighCVSS 7.8 EPSS 0.25%
LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on t...
-
HighCVSS 7.5 EPSS 1.4%
LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability....
-
MediumCVSS 6.5 EPSS 2.9%
LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to e...
-
MediumCVSS 6.5 EPSS 2.9%
LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to ex...
-
MediumCVSS 6.5 EPSS 2.9%
LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploi...
-
HighCVSS 7.5 EPSS 1.4%
LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the c...
-
CriticalCVSS 9.1 EPSS 2.0%
LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific...
-
HighCVSS 7.5 EPSS 1.4%
LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within...
-
CriticalCVSS 9.1 EPSS 2.0%
LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific f...
-
HighCVSS 7.5 EPSS 1.4%
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili...
-
HighCVSS 7.5 EPSS 1.4%
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili...
-
CriticalCVSS 9.8 EPSS 2.4%
LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The spe...
-
CVE-2023-40504 LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability
PublishedCriticalCVSS 9.8 EPSS 88.7% Framework moduleLG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fla...
-
HighCVSS 7.5 EPSS 1.4%
LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili...
-
CVE-2023-40502 LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability
PublishedCriticalCVSS 9.1 EPSS 82.0%LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fla...
-
CriticalCVSS 9.8 EPSS 1.9%
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The speci...
-
CriticalCVSS 9.8 EPSS 1.9%
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The speci...
-
CVE-2023-40499 LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability
PublishedCriticalCVSS 9.1 EPSS 2.0%LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw ex...
-
CVE-2023-40497 LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability
PublishedCriticalCVSS 9.8 EPSS 67.3%LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw ex...
-
CVE-2023-40498 LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
PublishedCriticalCVSS 9.8 EPSS 85.1% Framework moduleLG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.