Vendors / Diafan Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Diafan records in CISA KEV No Diafan vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=shop&action=search.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0057 · Published 2023-07-20 · No fix listed CWE-79
Priority LOW 32
Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to ad…
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0106 · Published 2015-01-01 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 0 2 0 0
