Wbce - CVE CyberSecurity Database News

Sep 28, 2023 XSS Exploit PHP Wbce

CVE-2023-43871 - Exploiting a File Upload XSS Vulnerability in WBCE CMS v1.6.1

A vulnerability identified as CVE-2023-43871 has been found in WBCE CMS version 1.6.1. This flaw lets a local attacker upload PDF files that

Nov 25, 2022 RCE Exploit PHP Wbce

CVE-2022-45039 - How Attackers Exploited WBCE CMS v1.5.4 For Arbitrary File Upload and Remote Code Execution

WBCE CMS is an open-source content management system written in PHP, designed for simplicity and flexibility. But with flexibility sometimes comes risk. In this post,

Nov 25, 2022 XSS Exploit PHP Wbce

CVE-2022-45037 - Exploiting Reflected XSS in WBCE CMS v1.5.4 Admin User Listing

CVE-2022-45037 is a Cross-Site Scripting (XSS) vulnerability found in WBCE CMS version 1.5.4. The bug allows attackers to inject JavaScript or HTML code

Nov 25, 2022 XSS PHP Wbce

CVE-2022-45036 - Breaking Down the WBCE CMS v1.5.4 XSS Vulnerability in Search Settings

WBCE CMS is a popular open-source content management system, widely used for creating and managing websites. Even small vulnerabilities in such platforms can have a

Nov 25, 2022 XSS Exploit PHP Wbce

CVE-2022-45040 - Exploiting XSS in WBCE CMS v1.5.4 via the "Name Section" Field

--- Summary: CVE-2022-45040 is a Cross-site Scripting (XSS) vulnerability discovered in WBCE CMS version 1.5.4. This flaw happens in the /admin/pages/sections_