Nucleus Cms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-16636 Dec 10, 19:29 MEDIUM POC This Month

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Nucleus Cms Nucleuscms

NVD GitHub

CVSS 3.0

6.5

EPSS

1.0%

CVE-2015-5454 Jul 08, 15:59 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Nucleus Cms Nucleuscms

NVD GitHub

CVSS 2.0

4.3

EPSS

0.5%

CVE-2018-16636

EPSS 1% CVSS 6.5

MEDIUM POC This Month

PHP XSS Nucleus Cms +1

NVD GitHub

CVE-2015-5454

EPSS 1% CVSS 4.3

MEDIUM POC This Month

XSS Nucleus Cms Nucleuscms

NVD GitHub