Vendors / Sitemagic Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Sitemagic records in CISA KEV No Sitemagic vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00958 · Published 2025-12-17 · No fix listed CWE-434
Priority MEDIUM 40
Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01107 · Published 2019-10-23 · No fix listed CWE-352
Priority LOW 38
An issue was discovered in Sitemagic CMS v4.4.
CVSS 3.0 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02031 · Published 2019-02-23 · No fix listed CWE-434
Priority LOW 29
Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00856 · Published 2019-10-23 · No fix listed CWE-79
Priority LOW 29
Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00826 · Published 2019-03-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 2 0 0
THREATIST.IORead the docs