Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Sitemagic Clear all filters
TI-2023-30204 CVE-2023-53921 · GHSA-wjjc-cc9v-hq6j

SitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload

Priority HIGH 73

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00958 Published 2025-12-17 No fix listed CWE-434
TI-2019-13239 CVE-2019-18220 · GHSA-cr2g-6587-3x53

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it…

Priority MEDIUM 40

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01107 Published 2019-10-23 No fix listed CWE-352