AdaptCMS 3.0 Cross Site Scripting

2015.05.07
Credit: provensec
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Affected software: adaptcms # Type of vulnerability:xss # URL:adaptcms.com # Discovered by: provensec # Website: provensec.com #version: AdaptCMS 3.0 # Proof of concept goto site/category/ add new category with xss payload "><img src=d onerror=confirm(1);> open category and javascript will execute


Vote for this issue:
50%
50%

Comment it here.

Copyright 2025, cxsecurity.com

 

Back to Top