Gleezcms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Gleezcms records in CISA KEV

No Gleezcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gleez Cms 4 records HIGH

Records

4 records

TI-2021-08832 CVE-2021-27312 · GHSA-7mxg-r76p-363g

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote…

HIGH 76

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01031 Published 2024-04-03 No fix listed CWE-918

TI-2018-11292 CVE-2018-15845 · GHSA-g644-x4hj-cmhq

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

MEDIUM 43

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0232 Published 2018-08-25 No fix listed CWE-352

TI-2018-11711 CVE-2018-16347 · GHSA-5qqx-32hw-5vx4

An issue was discovered in Gleez CMS v1.2.0.

LOW 29

An issue was discovered in Gleez CMS v1.2.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2018-09-02 No fix listed CWE-79

TI-2018-05109 CVE-2018-7035 · GHSA-m2r2-qc49-gqw4

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote…

LOW 26

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00946 Published 2018-04-05 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0