No-cms Project No-cms — known CVE vulnerabilities

Every CVE whose affected-product data names No-cms Project No-cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-18868 — CVSS 6.1 (medium): No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.
• CVE-2018-19901 — CVSS 4.8 (medium): No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.
• CVE-2018-19902 — CVSS 4.8 (medium): No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.