Vulnerabilities

TI-2012-04144 CVE-2012-4902 · GHSA-3hgc-wjh7-g8wr

Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01293 Published 2015-05-20 No fix listed CWE-352

TI-2012-04143 CVE-2012-4901 · GHSA-8vhv-r72q-4rpj

Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themes_editor parameter in an add_template action to admin/index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02007 Published 2015-05-20 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and…

Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote…