Onethird: Security Vulnerabilities
Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors.
CVSS Score
9.8
EPSS Score
0.031
Published
2020-10-20
Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-04-28
Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-04-28