Search vulnerabilities

Results 23

Export CSV
CVE-2019-8432

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-11680

An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-11679

An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products