Extreme Cms » Extreme Cms : Security Vulnerabilities, CVEs, CVSS score >= 6
admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote attackers to conduct unauthorized activities. NOTE: this issue can be combined with another vulnerability to expand the scope of a cross-site scripting (XSS) attack without authentication. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
Max CVSS
6.8
EPSS Score
0.39%
Published
2006-11-20
Updated
2011-03-08
Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) bg1, (2) bg2, (3) text, or (4) size parameters. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
Max CVSS
6.8
EPSS Score
0.39%
Published
2006-11-20
Updated
2011-03-08
2 vulnerabilities found