Csphere: >> Clansphere >> 2011.4 Security Vulnerabilities
A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter.
CVSS Score
6.1
EPSS Score
0.003
Published
2022-11-09
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.
CVSS Score
6.1
EPSS Score
0.009
Published
2021-03-23
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.
CVSS Score
6.1
EPSS Score
0.041
Published
2021-03-23
Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php.
CVSS Score
4.3
EPSS Score
0.003
Published
2015-01-13