Vulnerabilities

Filters

Reset all

1 selected

37 records

Sort

Vendor: Maccms Clear all filters

TI-2025-09530 CVE-2025-10397 · GHSA-59hh-wc56-cmrq

Magicblack MacCMS API server-side request forgery

LOW 23

A vulnerability was identified in Magicblack MacCMS 2025.1000.4050.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00345 Published 2025-09-14 No fix listed CWE-918

TI-2025-09528 CVE-2025-10395 · GHSA-93f7-rf7f-3gpw

Magicblack MacCMS Scheduled Task col_url server-side request forgery

LOW 23

A vulnerability was found in Magicblack MacCMS 2025.1000.4050.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00345 Published 2025-09-14 No fix listed CWE-918

TI-2025-09294 CVE-2025-10122 · GHSA-hcmr-664c-qv26

Maccms10 Database.php rep sql injection

LOW 31

A vulnerability was found in Maccms10 2025.1000.4050.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00326 Published 2025-09-09 No fix listed CWE-74

TI-2025-28783 CVE-2025-45474 · GHSA-v9vv-qfg5-cxfg

maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings.

HIGH 71

maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0039 Published 2025-05-29 No fix listed CWE-918

TI-2025-28784 CVE-2025-45475 · GHSA-xg77-2m7h-4885

maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.

MEDIUM 58

maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00347 Published 2025-05-27 No fix listed CWE-918

TI-2025-20709 CVE-2025-28091 · GHSA-rwcm-vvj8-qgg5

maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.

HIGH 80

maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00451 Published 2025-03-28 No fix listed CWE-918

TI-2025-20708 CVE-2025-28090 · GHSA-7q69-vmcq-34w9

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.

HIGH 80

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00439 Published 2025-03-28 No fix listed CWE-918

TI-2025-20707 CVE-2025-28089 · GHSA-c928-5v6m-vm5h

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.

HIGH 80

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00451 Published 2025-03-28 No fix listed CWE-918

TI-2024-31084 CVE-2024-46654 · GHSA-gvpr-rr23-63gq

A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0025 Published 2024-09-20 No fix listed CWE-79

TI-2024-21313 CVE-2024-32391 · GHSA-7fp6-x6hv-xgr4

Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote…

HIGH 65

Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.0092 Published 2024-04-19 No fix listed CWE-79

TI-2022-23717 CVE-2022-47872 · GHSA-cg8w-gw69-jwcj

A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to…

MEDIUM 40

A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address mod…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00873 Published 2023-02-01 No fix listed CWE-918

TI-2022-22079 CVE-2022-44870 · GHSA-2x79-g9jx-q9f2

A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows…

MEDIUM 60

A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management mo…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00533 Published 2023-01-06 No fix listed CWE-79

TI-2022-15862 CVE-2022-35148 · GHSA-2m5g-75fx-j86r

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection…

LOW 30

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00728 Published 2022-08-17 No fix listed CWE-89

TI-2022-13318 CVE-2022-31303 · GHSA-3w9j-cqm3-rw92

maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

LOW 25

maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00429 Published 2022-06-21 No fix listed CWE-79

TI-2022-13317 CVE-2022-31302 · GHSA-55xf-pmcg-gmc3

maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

LOW 25

maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00429 Published 2022-06-21 No fix listed CWE-79

TI-2021-19535 CVE-2021-43707 · GHSA-33w9-vjr3-c3cm

Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter.

LOW 28

Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2022-03-31 No fix listed CWE-79

TI-2022-10767 CVE-2022-27887 · GHSA-p6xv-33w9-6vvv

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability…

LOW 28

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2022-03-25 No fix listed CWE-79

TI-2022-10766 CVE-2022-27886 · GHSA-9qhf-5qfv-p985

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability…

LOW 28

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index.html via the wd parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2022-03-25 No fix listed CWE-79

TI-2022-10765 CVE-2022-27885 · GHSA-5j2v-3vwp-pgv7

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS)…

LOW 28

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2022-03-25 No fix listed CWE-79

TI-2022-10764 CVE-2022-27884 · GHSA-4pq5-2r32-9fgx

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability…

LOW 28

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index.html via the wd parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2022-03-25 No fix listed CWE-79

TI-2022-09881 CVE-2022-26573 · GHSA-h9qm-fpq8-rqxr

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS)…

LOW 28

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00566 Published 2022-03-25 No fix listed CWE-79

TI-2021-20838 CVE-2021-45787 · GHSA-42r2-7h69-m773

There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding…

LOW 25

There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00459 Published 2022-03-16 No fix listed CWE-79

TI-2021-20837 CVE-2021-45786 · GHSA-vqhx-92pw-qxpw

In maccms v10, an attacker can log in through /index.php/user/login in the "col" and…

MEDIUM 44

In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01198 Published 2022-03-16 No fix listed CWE-287

TI-2020-14054 CVE-2020-21434 · GHSA-6q4r-96qj-749p

Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function…

LOW 25

Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0052 Published 2021-10-04 No fix listed CWE-79

TI-2020-14045 CVE-2020-21387 · GHSA-h27q-vg4q-q84x

A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows…

LOW 28

A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00574 Published 2021-10-04 No fix listed CWE-79