Nucleus Cms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-16636 MEDIUM POC This Month

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS PHP Nucleus Cms

NVD GitHub

CVSS 3.0

6.5

EPSS

1.0%

CVE-2015-5454 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Nucleus Cms

NVD GitHub

CVSS 2.0

4.3

EPSS

0.5%

CVE-2018-16636

EPSS 1% CVSS 6.5

MEDIUM POC This Month

XSS PHP Nucleus Cms

NVD GitHub

CVE-2015-5454

EPSS 1% CVSS 4.3

MEDIUM POC This Month

XSS Nucleus Cms

NVD GitHub