Gpeasy Cms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-0807 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS PHP Gpeasy Cms

NVD Exploit-DB GitHub VulDB

CVSS 2.0

4.3

EPSS

9.9%

CVE-2012-6513 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Gpeasy Cms

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.8%

CVE-2013-0807

EPSS 10% CVSS 4.3

MEDIUM POC PATCH This Month

XSS PHP Gpeasy Cms

NVD Exploit-DB GitHub VulDB

CVE-2012-6513

EPSS 1% CVSS 4.3

MEDIUM POC This Month

PHP XSS Gpeasy Cms

NVD Exploit-DB