Vulnerabilities

TI-2016-09230 CVE-2016-20054 · GHSA-3qcm-pj6q-w4c5

Nodcms Cross Site Request Forgery via admin endpoints

MEDIUM 57

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0011 Published 2026-04-04 No fix listed CWE-79

TI-2023-03398 CVE-2023-3641 · GHSA-9p4h-vvm6-jfr2

khodakhah NodCMS POST Request blog-comment-4 cross site scripting

LOW 28

A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0045 Published 2023-07-12 No fix listed CWE-79

TI-2020-13913 CVE-2020-20697 · GHSA-7xqx-xwg9-jx34

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to…

LOW 23

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00546 Published 2023-06-20 No fix listed CWE-79

Vulnerabilities

Filters

Nodcms Cross Site Request Forgery via admin endpoints

khodakhah NodCMS POST Request blog-comment-4 cross site scripting

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to…