MediumCVSS 4.8
EPSS 0.56%
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.
Vendor
no-cms project vulnerabilities
3 published CVES affecting no-cms project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest no-cms project CVEs
Newest publication first
-
-
MediumCVSS 4.8 EPSS 0.56%
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.
-
MediumCVSS 6.1 EPSS 0.71%
No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.