Read the docs

BloofoxCMS

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

BloofoxCMS records in CISA KEV

No BloofoxCMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bloofoxcms 3 records LOW

Records

4 records

TI-2021-22520 CVE-2021-47906 · GHSA-7x4x-5cr5-pcpx

BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting

Priority MEDIUM 56

BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parameter that allows authenticated attackers to inject malicious scripts.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0023 Published 2026-01-23 No fix listed CWE-79
TI-2008-00403 CVE-2008-0428 · GHSA-92hw-2m7p-xj5c

Multiple SQL injection vulnerabilities in the login function in…

Priority LOW 36

Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to ad…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01681 Published 2008-01-23 No fix listed CWE-89
Open these records in search →