Vulnerabilities

TI-2020-13573 CVE-2020-19268 · GHSA-3cmx-whgg-cr4j

A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4…

LOW 25

A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00306 Published 2021-09-09 No fix listed CWE-352

TI-2020-13572 CVE-2020-19267 · GHSA-cp5f-x2vj-pqgh

An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to…

MEDIUM 45

An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2021-09-09 No fix listed CWE-434

TI-2020-13571 CVE-2020-19266 · GHSA-cw35-8jqv-8rfq

A stored cross-site scripting (XSS) vulnerability in the…

LOW 28

A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2021-09-09 No fix listed CWE-79

TI-2020-13570 CVE-2020-19265 · GHSA-jgw4-3xpf-hvpv

A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links…