Vendors / Mipcms Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Mipcms records in CISA KEV No Mipcms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00392 · Published 2023-05-08 · No fix listed CWE-79
Priority LOW 39
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00661 · Published 2021-09-09 · No fix listed CWE-352
Priority LOW 35
A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01067 · Published 2021-07-08 · No fix listed CWE-918
Priority LOW 30
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00565 · Published 2021-09-09 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs