CPE

Cpe:2.3:a:agentejo:cockpit:2.6.3:::::::*

1 brief RSS

Stored Cross-Site Scripting in Agentejo Cockpit CMS

Agentejo Cockpit CMS versions up to 2.6.3 contain a stored XSS vulnerability via the asset upload endpoint, allowing attackers to execute arbitrary JavaScript by uploading and accessing malicious .shtml files.

Cockpit CMS web-security xss cms

1r 2t 1c 1h ago

Cpe:2.3:a:agentejo:cockpit:2.6.3:*:*:*:*:*:*:*

Stored Cross-Site Scripting in Agentejo Cockpit CMS

Cpe:2.3:a:agentejo:cockpit:2.6.3:::::::*