Vulnerabilities

TI-2019-06057 CVE-2019-8440 · GHSA-vcc8-v3g5-2m8c

An issue was discovered in DiliCMS 2.4.0.

LOW 23

An issue was discovered in DiliCMS 2.4.0.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0067 Published 2019-03-07 No fix listed CWE-79

TI-2019-06056 CVE-2019-8439 · GHSA-x2w9-8cc6-gcjm

LOW 26

An issue was discovered in DiliCMS 2.4.0.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00667 Published 2019-03-07 No fix listed CWE-79

TI-2019-06055 CVE-2019-8438 · GHSA-p32f-4m42-2xrv

LOW 23

An issue was discovered in DiliCMS 2.4.0.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0067 Published 2019-03-07 No fix listed CWE-79

TI-2018-13678 CVE-2018-19291 · GHSA-h7jm-ppvf-4m5h

LOW 30

An issue was discovered in DiliCMS 2.4.0.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00651 Published 2018-11-15 No fix listed CWE-352

TI-2018-12882 CVE-2018-18210 · GHSA-hhwv-4548-4v44

LOW 29

XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2018-10-10 No fix listed CWE-79

TI-2018-12881 CVE-2018-18209 · GHSA-8jff-4jfc-6xj3

LOW 29

XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2018-10-10 No fix listed CWE-79

TI-2018-07372 CVE-2018-10430 · GHSA-9pmf-grfm-3f2j

LOW 23

An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00648 Published 2018-04-26 No fix listed CWE-79