Phpcmf

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpcmf records in CISA KEV

No Phpcmf vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Phpcmf · all components

TI-2018-14191 CVE-2018-20012 · GHSA-5c73-9g8h-gqhr

LOW 23

PHPCMF 4.1.3 has XSS via the first input field to the index.php?s=member&c=register&m=index URI.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00536 Published 2018-12-10 No fix listed CWE-79