Sunlight-cms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sunlight-cms records in CISA KEV

No Sunlight-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sunlight Cms 3 records MEDIUM

Records

3 records in Sunlight Cms · all components

TI-2023-26075 CVE-2023-48202 · GHSA-c2jp-pq2c-g7jh

Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated…

MEDIUM 58

Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00384 Published 2024-01-27 No fix listed CWE-79

TI-2023-26074 CVE-2023-48201 · GHSA-p899-8gh2-v29w

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote…

MEDIUM 58

Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0055 Published 2024-01-27 No fix listed CWE-79

TI-2007-02685 CVE-2007-2774 · GHSA-wqh3-26vv-cwq2

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote…

LOW 39

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) _connect.php or (2) modules/startup.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03738 Published 2007-05-21 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0