Vendors / wangl1989 Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 4
Exploited now wangl1989 records in CISA KEV No wangl1989 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 80
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00519 · Published 2025-01-14 · No fix listed CWE-502
Priority HIGH 80
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00519 · Published 2025-01-14 · No fix listed CWE-502
Priority HIGH 76
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00445 · Published 2025-01-14 · No fix listed CWE-918
Priority HIGH 74
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00455 · Published 2025-01-14 · No fix listed CWE-89
Priority HIGH 74
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00519 · Published 2025-01-14 · No fix listed CWE-502
Priority MEDIUM 57
A vulnerability was found in wangl1989 mysiteforme 1.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00585 · Published 2025-01-05 · No fix listed CWE-918
Priority MEDIUM 57
A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00633 · Published 2025-01-05 · No fix listed CWE-20
Priority MEDIUM 56
A vulnerability was found in wangl1989 mysiteforme 1.0.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.0046 · Published 2025-01-05 · No fix listed CWE-284
Priority MEDIUM 56
A vulnerability was found in wangl1989 mysiteforme 1.0.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00346 · Published 2025-01-05 · No fix listed CWE-79
Priority MEDIUM 49
A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00397 · Published 2025-03-04 · No fix listed CWE-89
Priority MEDIUM 48
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00519 · Published 2025-01-14 · No fix listed CWE-502
Priority LOW 35
mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00924 · Published 2022-05-24 · No fix listed CWE-918
Priority LOW 29
mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00416 · Published 2022-01-19 · No fix listed CWE-352
Priority LOW 25
mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background blog management.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00441 · Published 2022-01-19 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 4 6 0 0
THREATIST.IORead the docs