Chemcms Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Chemcms Project records in CISA KEV

No Chemcms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Chemcms · all components

TI-2018-07293 CVE-2018-10295 · GHSA-fvmx-hhxj-xqgj

LOW 39

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00505 Published 2018-04-22 No fix listed CWE-352

TI-2018-11710 CVE-2018-16346 · GHSA-39p8-qmf2-xrv5

LOW 23

ChemCMS 1.0.6 has XSS via the "setting -> website information" field.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-09-02 No fix listed CWE-79