Vulnerabilities

TI-2020-13322 CVE-2020-18132 · GHSA-mm79-m287-p4q9

Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute…

MEDIUM 55

Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00392 Published 2023-05-08 No fix listed CWE-79

TI-2020-13569 CVE-2020-19264 · GHSA-mwjx-c93w-r993

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add…

LOW 30

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00565 Published 2021-09-09 No fix listed CWE-352

TI-2020-13568 CVE-2020-19263 · GHSA-h75m-rwwv-6vcq

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily…

LOW 39

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00661 Published 2021-09-09 No fix listed CWE-352

TI-2020-13874 CVE-2020-20582 · GHSA-xpvp-wh4v-ppc2

A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of…

LOW 35

A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01067 Published 2021-07-08 No fix listed CWE-918

Vulnerabilities

Filters

Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute…

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add…

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily…

A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of…