nodcms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

nodcms records in CISA KEV

No nodcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nodcms 3 records MEDIUM

Records

3 records

TI-2016-09230 CVE-2016-20054 · GHSA-3qcm-pj6q-w4c5

Nodcms Cross Site Request Forgery via admin endpoints

MEDIUM 57

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0011 Published 2026-04-04 No fix listed CWE-79

TI-2023-03398 CVE-2023-3641 · GHSA-9p4h-vvm6-jfr2

khodakhah NodCMS POST Request blog-comment-4 cross site scripting

LOW 28

A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0045 Published 2023-07-12 No fix listed CWE-79

TI-2020-13913 CVE-2020-20697 · GHSA-7xqx-xwg9-jx34

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to…

LOW 23

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00546 Published 2023-06-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0