Vulnerabilities (CVE)

Filtered by vendor Nodcms Subscribe
Filtered by product Nodcms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-3641 1 Nodcms 1 Nodcms 2024-05-17 5.0 MEDIUM 6.1 MEDIUM
A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233887.
CVE-2020-20697 1 Nodcms 1 Nodcms 2024-02-04 N/A 4.8 MEDIUM
Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter.