Dswjcms Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dswjcms Project records in CISA KEV

No Dswjcms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dswjcms 4 records MEDIUM

Records

4 records in Dswjcms · all components

TI-2020-13572 CVE-2020-19267 · GHSA-cp5f-x2vj-pqgh

An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to…

MEDIUM 45

An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2021-09-09 No fix listed CWE-434

TI-2020-13571 CVE-2020-19266 · GHSA-cw35-8jqv-8rfq

A stored cross-site scripting (XSS) vulnerability in the…

LOW 28

A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2021-09-09 No fix listed CWE-79

TI-2020-13570 CVE-2020-19265 · GHSA-jgw4-3xpf-hvpv

A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links…

LOW 28

A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2021-09-09 No fix listed CWE-79

TI-2020-13573 CVE-2020-19268 · GHSA-3cmx-whgg-cr4j

A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4…

LOW 25

A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00306 Published 2021-09-09 No fix listed CWE-352

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0