Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Vendor: wolfcms Component: Wolf Cms Clear all filters
TI-2019-15210 CVE-2019-25070 · GHSA-fp8c-wpgg-mgpc

WolfCMS User Add cross site scripting

Priority LOW 29

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in WolfCMS up to 0.8.3.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0088 Published 2022-06-09 No fix listed CWE-80
TI-2018-06360 CVE-2018-8814 · GHSA-4ffj-h795-6cf8

Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify plugin/[pluginname]/settings by crafting a malicious request.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0299 Published 2018-04-04 No fix listed CWE-352
TI-2018-06359 CVE-2018-8813 · GHSA-jp24-7mw8-g9mx

Open redirect vulnerability in the login[redirect] parameter login functionality in…

Priority LOW 28

Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0322 Published 2018-04-04 No fix listed CWE-601
TI-2018-15742 CVE-2018-1000087 · GHSA-h4w8-c542-mh4c

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability…

Priority LOW 23

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Contro…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00638 Published 2018-03-13 No fix listed CWE-79
TI-2018-15739 CVE-2018-1000084 · GHSA-7cch-m59v-c3cp

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting…

Priority LOW 25

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege user can steal the cookie of admin user and compromise the ad…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00644 Published 2018-03-13 No fix listed CWE-79
TI-2015-05511 CVE-2015-6568 · GHSA-x5m3-795f-59g3

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because…

Priority MEDIUM 51

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file extension to ".php" after originally usin…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.1055 Published 2017-04-14 No fix listed CWE-20