Read the docs

Magnolia-cms

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Magnolia-cms records in CISA KEV

No Magnolia-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Magnolia Form Module · all components

Priority LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the (1) username, (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03517 Published 2013-08-09 No fix listed CWE-79
Open these records in search →