Vendors / Wdja Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now Wdja records in CISA KEV No Wdja vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.06191 · Published 2021-11-03 · No fix listed CWE-79
Priority MEDIUM 42
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0135 · Published 2021-10-06 · No fix listed
Priority LOW 29
A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00492 · Published 2021-10-06 · No fix listed CWE-352
Priority LOW 28
Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00477 · Published 2021-01-11 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
3 0 2 0 0
THREATIST.IORead the docs