Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2023-46378

Disclosure Date: October 31, 2023 (last updated November 09, 2023)
Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php.
Attacker Value
Unknown

CVE-2022-33121

Disclosure Date: June 24, 2022 (last updated February 24, 2025)
A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link.
Attacker Value
Unknown

CVE-2021-41663

Disclosure Date: June 13, 2022 (last updated February 23, 2025)
A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page.
Attacker Value
Unknown

CVE-2021-44970

Disclosure Date: February 10, 2022 (last updated February 23, 2025)
MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin/page-edit.php.