Vulnerabilities (CVE)

Filtered by vendor Moderncampus Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-35860 1 Moderncampus 1 Omni Cms 2024-08-14 N/A 5.3 MEDIUM
A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.
CVE-2023-35859 1 Moderncampus 1 Omni Cms 2024-07-18 N/A 6.1 MEDIUM
A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters.