Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

TI-2025-01870 CVE-2025-2133 · GHSA-qqh8-86jc-cjgp

ftcms edit cross site scripting

Priority MEDIUM 55

A vulnerability classified as problematic was found in ftcms 2.1.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00314 Published 2025-03-09 No fix listed CWE-79
TI-2025-01869 CVE-2025-2132 · GHSA-f99m-pcvw-8vpj

ftcms Search ajax_all_lists sql injection

Priority MEDIUM 56

A vulnerability classified as critical has been found in ftcms 2.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00442 Published 2025-03-09 No fix listed CWE-74
Priority LOW 38

In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and se…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00404 Published 2022-09-07 No fix listed CWE-352