Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-35860 | 1 Moderncampus | 1 Omni Cms | 2024-08-14 | N/A | 5.3 MEDIUM |
A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php. | |||||
CVE-2023-35859 | 1 Moderncampus | 1 Omni Cms | 2024-07-18 | N/A | 6.1 MEDIUM |
A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters. |