Read the docs

LibrettoCMS

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

LibrettoCMS records in CISA KEV

No LibrettoCMS vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2013-06195 CVE-2013-10054 · GHSA-7xcq-239h-p5hq

LibrettoCMS File Manager Arbitrary File Upload

Priority HIGH 81

An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02067 Published 2025-08-04 No fix listed CWE-434
Open these records in search →