Vulnerabilities

TI-2023-18788 CVE-2023-37122 · GHSA-px22-jgfm-6wr7

A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to…

LOW 24

A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2023-07-06 No fix listed CWE-79

TI-2019-06040 CVE-2019-8421 · GHSA-6xf5-j3w7-8rqx

upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL…

LOW 34

upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01215 Published 2019-02-17 No fix listed CWE-89

TI-2018-13858 CVE-2018-19560 · GHSA-xhc4-5vj2-qmpr

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.

LOW 39

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00652 Published 2018-11-26 No fix listed CWE-352

TI-2018-13543 CVE-2018-19104 · GHSA-99q7-pwhj-jjc3

In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload…

LOW 39

In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00646 Published 2018-11-08 No fix listed CWE-352

TI-2018-12906 CVE-2018-18258 · GHSA-wqcf-q92w-mcgr

An issue was discovered in BageCMS 3.1.3.

MEDIUM 45

An issue was discovered in BageCMS 3.1.3.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01489 Published 2018-10-11 No fix listed CWE-94

TI-2018-12905 CVE-2018-18257 · GHSA-6pjp-chrp-qx34

An issue was discovered in BageCMS 3.1.3.

LOW 36

An issue was discovered in BageCMS 3.1.3.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01551 Published 2018-10-11 No fix listed CWE-22

TI-2018-10450 CVE-2018-14582 · GHSA-p6cc-gmff-5q9x

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.

LOW 39

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-07-24 No fix listed CWE-352

Vulnerabilities

Filters

A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to…

upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL…

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.

In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload…

An issue was discovered in BageCMS 3.1.3.

An issue was discovered in BageCMS 3.1.3.

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.