TI-2024-21522 CVE-2024-32640
MasaCMS SQL Injection vulnerability
Priority CRITICAL 89
MASA CMS is an Enterprise Content Management platform based on open source technology.
MasaCMS
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
MasaCMS records in CISA KEVNo MasaCMS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records
Priority HIGH 82
Masa CMS is an open source Enterprise Content Management platform.
Priority HIGH 71
Masa CMS is an open source Enterprise Content Management platform.
Priority HIGH 66
Masa CMS is an open source Enterprise Content Management platform.
TI-2022-23274 CVE-2022-47002 · GHSA-8m42-x386-j52h
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows…
Priority MEDIUM 51
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.
TI-2026-29106 CVE-2026-40331
Masa CMS unauthenticated SQL injection via altTable parameter in JSON API
Priority MEDIUM 48
Masa CMS is an open source content management system.
Priority MEDIUM 48
Masa CMS is an open source content management system.
Priority MEDIUM 48
Masa CMS is an open source content management system.
TI-2026-29102 CVE-2026-40325
Masa CMS CSRF in content restoration allows unauthorized restoration of deleted content
Priority MEDIUM 45
Masa CMS is a content management system forked from Mura CMS.
TI-2021-18659 CVE-2021-42183 · GHSA-qwpm-6h36-f4f8
MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/.
Priority MEDIUM 40
MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/.
TI-2026-29086 CVE-2026-40309
Masa CMS CSRF in trash management allows unauthorized permanent deletion of deleted content
Priority LOW 39
Masa CMS is a content management system forked from Mura CMS.
Priority LOW 35
Masa CMS is an open source Enterprise Content Management platform.
TI-2026-29103 CVE-2026-40326
Masa CMS CSRF in site bundle creation allows unauthorized site data export
Priority LOW 30
Masa CMS is a content management system forked from Mura CMS.
TI-2026-28988 CVE-2026-40174
Masa CMS CSRF in user address management allows unauthorized address changes
Priority LOW 30
Masa CMS is a content management system forked from Mura CMS.
Priority LOW 24
Masa CMS is affected by an Open Redirect vulnerability due to improper handling of scheme-relative URLs.