Vendors / Ignitedcms Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Ignitedcms records in CISA KEV No Ignitedcms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/save_profile".
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00926 · Published 2021-08-06 · No fix listed CWE-352
Priority LOW 39
index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00638 · Published 2019-07-06 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in Ignited CMS through 2017-02-19.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00439 · Published 2018-08-08 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 1 0 0
