Filtered by vendor Moderncampus
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-35859 | 1 Moderncampus | 1 Omni Cms | 2024-07-18 | N/A | 6.1 MEDIUM |
A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters. | |||||
CVE-2022-40766 | 1 Moderncampus | 1 Omni Cms | 2022-09-21 | N/A | 9.8 CRITICAL |
Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' substring. |