Vendors / Sitemagic Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Sitemagic records in CISA KEV No Sitemagic vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01107 · Published 2019-10-23 · No fix listed CWE-352
Priority LOW 29
Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00856 · Published 2019-10-23 · No fix listed CWE-79
Priority LOW 29
Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00826 · Published 2019-03-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 2 0 0
