Skip to contentNaviwebs Navigatecms vulnerabilities
- naviwebs navigatecmsCross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name=...CVE-2020-232434.8 Medium
- naviwebs navigatecmsCross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via...CVE-2020-232424.8 Medium
- naviwebs navigatecmsIn NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on...CVE-2021-374789.8 Critical
- naviwebs navigatecmsIn NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql...CVE-2021-374779.8 Critical
- naviwebs navigatecmsIn NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection...CVE-2021-374769.8 Critical
- naviwebs navigatecmsIn NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql...CVE-2021-374759.8 Critical
- naviwebs navigatecmsIn NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection...CVE-2021-374739.8 Critical
- naviwebs navigatecmsNavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."CVE-2020-236575.4 Medium
- naviwebs navigatecmsNavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."CVE-2020-236565.4 Medium
- naviwebs navigatecmsNavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."CVE-2020-236555.4 Medium
- naviwebs navigatecmsNavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."CVE-2020-236545.4 Medium
- naviwebs navigatecmsThe install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension...CVE-2020-140679.8 Critical