Filtered by vendor Mozilocms Subscriptions
Filtered by product Mozilocms Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-2245 1 Mozilocms 1 Mozilocms 2025-07-13 5.4 Medium
Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter.
CVE-2024-44872 2 Mozilo, Mozilocms 2 Mozilocms, Mozilocms 2024-09-13 6.1 Medium
A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.