VendorsNo-CMS Projectno-cmsall versions
Vulnerabilities

No-CMS Project No-CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-18868
No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.
Published 2018-10-31 · Modified
6.1EPSS 0.007
CVE-2018-19901
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.
Published 2018-12-31 · Modified
4.8EPSS 0.006
CVE-2018-19902
No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.
Published 2018-12-31 · Modified
4.8EPSS 0.006