Catfish-cms

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Catfish-cms records in CISA KEV

No Catfish-cms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Catfish Blog · all components

TI-2018-13254 CVE-2018-18735 · GHSA-3g5r-3c4p-wrgj

LOW 39

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-10-28 No fix listed CWE-352

TI-2018-13255 CVE-2018-18736 · GHSA-mqf9-4983-rmfp

LOW 25

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00556 Published 2018-10-28 No fix listed CWE-79