Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-48824 | 1 Boidcms | 1 Boidcms | 2023-12-09 | N/A | 5.4 MEDIUM |
BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the title, subtitle, footer, or keywords parameter in a page=create action. | |||||
CVE-2023-38836 | 1 Boidcms | 1 Boidcms | 2023-10-10 | N/A | 8.8 HIGH |
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks. |