Filtered by vendor B2evolution
Subscriptions
Filtered by product B2evolution
Subscriptions
Total
25 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2017-5494 | 1 B2evolution | 1 B2evolution | 2017-01-27 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (1) comment frame or (2) avatar frame. | ||||
| CVE-2017-5553 | 1 B2evolution | 1 B2evolution | 2017-01-26 | N/A |
| Cross-site scripting (XSS) vulnerability in plugins/markdown_plugin/_markdown.plugin.php in b2evolution before 6.8.5 allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL. | ||||
| CVE-2016-7150 | 1 B2evolution | 1 B2evolution | 2017-01-23 | N/A |
| Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name. | ||||
| CVE-2016-7149 | 1 B2evolution | 1 B2evolution | 2017-01-23 | N/A |
| Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function. | ||||
| CVE-2017-5480 | 1 B2evolution | 1 B2evolution | 2017-01-18 | N/A |
| Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. (dot dot) in the fm_selected array parameter. | ||||