Filtered by vendor Nodcms Subscriptions
Filtered by product Nodcms Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-20697 1 Nodcms 1 Nodcms 2024-08-04 4.8 Medium
Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter.
CVE-2023-3641 1 Nodcms 1 Nodcms 2024-08-02 4.3 Medium
A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233887.