Threats affecting pkg:github/pwb003/cms

236 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 1.0%	CVE-2024-48655cms · Code Injection High8.8EPSS 1.0%2024-10-25CVE Database V5CVE-2024-48655 An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file. EPSS 1.0%Vulnerability CWE-94	CVE Database V5	2024-10-25
Medium	4.7	EPSS 0.2%	CVE-2024-46600cms · Cross-Site Request Forgery (CSRF) Medium4.7EPSS 0.2%2024-09-25CVE Database V5CVE-2024-46600 dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31 EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-09-25
Medium	6.3	EPSS 0.2%	CVE-2024-46485cms · Cross-Site Request Forgery (CSRF) Medium6.3EPSS 0.2%2024-09-25CVE Database V5CVE-2024-46485 dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-09-25
High	8.0	EPSS 0.3%	CVE-2024-46394cms · Cross-Site Request Forgery (CSRF) High8.0EPSS 0.3%2024-09-19CVE Database V5CVE-2024-46394 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-09-19
High	8.8	EPSS 0.3%	CVE-2024-46086cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-09-18CVE Database V5CVE-2024-46086 FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123 EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-09-18
High	8.8	EPSS 0.3%	CVE-2024-46362cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-09-17CVE Database V5CVE-2024-46362 FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-09-17
High	8.8	EPSS 0.2%	CVE-2024-46085cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.2%2024-09-17CVE Database V5CVE-2024-46085 FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-09-17
Critical	9.8	EPSS 0.6%	CVE-2024-44721CMS · Server-Side Request Forgery (SSRF) Critical9.8EPSS 0.6%2024-09-09CVE Database V5CVE-2024-44721 SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php. EPSS 0.6%Vulnerability CWE-918	CVE Database V5	2024-09-09
High	7.5	EPSS 0.7%	CVE-2024-44720CMS · Path Traversal High7.5EPSS 0.7%2024-09-09CVE Database V5CVE-2024-44720 SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php. EPSS 0.7%Vulnerability CWE-22	CVE Database V5	2024-09-09
Critical	9.8	EPSS 0.5%	CVE-2024-41444CMS · SeaCMS v12.9 has a SQL injection Critical9.8EPSS 0.5%2024-08-26CVE Database V5CVE-2024-41444 SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-08-26
High	8.8	EPSS 0.3%	CVE-2024-42632cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42632 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12
High	8.8	EPSS 0.3%	CVE-2024-42631cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42631 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12
High	8.8	EPSS 0.3%	CVE-2024-42630cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42630 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12
Medium	5.4	EPSS 0.2%	CVE-2024-42629cms · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2024-08-12CVE Database V5CVE-2024-42629 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-08-12
High	8.8	EPSS 0.3%	CVE-2024-42628cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42628 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12
High	8.8	EPSS 0.3%	CVE-2024-42627cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42627 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12
High	8.8	EPSS 0.3%	CVE-2024-42626cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42626 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12
Medium	5.4	EPSS 0.2%	CVE-2024-42625cms · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2024-08-12CVE Database V5CVE-2024-42625 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-08-12
High	8.8	EPSS 0.3%	CVE-2024-42624cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42624 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12
High	8.8	EPSS 0.3%	CVE-2024-42623cms · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-08-12CVE Database V5CVE-2024-42623 FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-08-12

Page 9 of 12