Threats affecting pkg:github/harryrabbit5651/cms

236 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.6%	CVE-2024-29684cms · Cross-Site Request Forgery (CSRF) Critical9.8EPSS 0.6%2024-03-26CVE Database V5CVE-2024-29684 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attacker to execute arbitrary code. EPSS 0.6%Vulnerability CWE-352	CVE Database V5	2024-03-26
High	7.4	EPSS 0.3%	CVE-2024-29499cms · Cross-Site Request Forgery (CSRF) High7.4EPSS 0.3%2024-03-22CVE Database V5CVE-2024-29499 Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-03-22
Low	2.4	EPSS 0.3%	CVE-2024-29338cms · Cross-Site Request Forgery (CSRF) Low2.4EPSS 0.3%2024-03-22CVE Database V5CVE-2024-29338 Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-03-22
Critical	9.8	EPSS 5.0%	CVE-2024-29275CMS · SQL Injection Critical9.8EPSS 5.0%2024-03-22CVE Database V5CVE-2024-29275 SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php. EPSS 5.0%Vulnerability CWE-89	CVE Database V5	2024-03-22
High	8.8	EPSS 0.3%	CVE-2024-28684cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-03-13CVE Database V5CVE-2024-28684 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	6.1	EPSS 0.5%	CVE-2024-28683cms · Cross-site Scripting Medium6.1EPSS 0.5%2024-03-13CVE Database V5CVE-2024-28683 DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2024-03-13
Medium	6.3	EPSS 0.2%	CVE-2024-28682cms · Cross-Site Request Forgery (CSRF) Medium6.3EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28682 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	6.1	EPSS 0.2%	CVE-2024-28681cms · Cross-Site Request Forgery (CSRF) Medium6.1EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28681 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	6.1	EPSS 0.5%	CVE-2024-28680cms · Cross-site Scripting Medium6.1EPSS 0.5%2024-03-13CVE Database V5CVE-2024-28680 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2024-03-13
Medium	6.3	EPSS 0.2%	CVE-2024-28678cms · Cross-Site Request Forgery (CSRF) Medium6.3EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28678 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
High	8.8	EPSS 0.3%	CVE-2024-28675cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-03-13CVE Database V5CVE-2024-28675 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-03-13
High	8.8	EPSS 0.4%	CVE-2024-28673cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.4%2024-03-13CVE Database V5CVE-2024-28673 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php. EPSS 0.4%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	5.4	EPSS 0.2%	CVE-2024-28672cms · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28672 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	6.1	EPSS 0.2%	CVE-2024-28670cms · Cross-Site Request Forgery (CSRF) Medium6.1EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28670 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	5.4	EPSS 0.2%	CVE-2024-28669cms · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28669 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	6.1	EPSS 0.2%	CVE-2024-28667cms · Cross-Site Request Forgery (CSRF) Medium6.1EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28667 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
Medium	5.5	EPSS 0.2%	CVE-2024-28666cms · Cross-Site Request Forgery (CSRF) Medium5.5EPSS 0.2%2024-03-13CVE Database V5CVE-2024-28666 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-03-13
High	8.8	EPSS 0.3%	CVE-2024-28665cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-03-13CVE Database V5CVE-2024-28665 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-03-13
High	8.8	EPSS 0.3%	CVE-2024-28432cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-03-13CVE Database V5CVE-2024-28432 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-03-13
High	8.8	EPSS 0.3%	CVE-2024-28431cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-03-13CVE Database V5CVE-2024-28431 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-03-13

Page 11 of 12