Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*

1 brief RSS
low advisory

Stored Cross-Site Scripting in Agentejo Cockpit CMS

Agentejo Cockpit CMS versions up to 2.6.3 contain a stored XSS vulnerability via the asset upload endpoint, allowing attackers to execute arbitrary JavaScript by uploading and accessing malicious .shtml files.

Cockpit CMS web-security xss cms
1r 2t 1c