X3cms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

X3cms records in CISA KEV

No X3cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X3 Cms 3 records LOW

Records

3 records

TI-2014-07199 CVE-2014-8771 · GHSA-rfgw-qj68-fh53

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00612 Published 2014-12-03 No fix listed CWE-352

TI-2011-04528 CVE-2011-5255 · GHSA-347x-pmh7-x2qr

Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) username, or (3) password paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01666 Published 2013-01-31 No fix listed CWE-79

TI-2014-07200 CVE-2014-8772 · GHSA-9p76-42q7-9xch

Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and…

LOW 18

Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00777 Published 2014-12-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0