Cmslogik
1 CVEs
product
Monthly
Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_email, (2) header_title, (3) site_title. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 12.3%.
CSRF
XSS
Cmslogik
NVD
Exploit-DB
CVSS 2.0
4.3
EPSS
12.3%
EPSS 12%
CVSS 4.3
MEDIUM
POC
THREAT
This Month
Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_email, (2) header_title, (3) site_title. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 12.3%.
CSRF
XSS
Cmslogik
NVD
Exploit-DB