Vulnerabilities

TI-2018-12369 CVE-2018-17361 · GHSA-mrcf-8r9j-jvmm

Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject…

LOW 29

Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because $_SERVER['PHP_SELF'] is mishandled.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0083 Published 2018-09-23 No fix listed CWE-79

TI-2018-11715 CVE-2018-16352 · GHSA-83p2-3vfv-j3jp

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code…

MEDIUM 45

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2018-09-02 No fix listed CWE-434

TI-2018-10765 CVE-2018-14959 · GHSA-mq4f-gx53-59fr

An issue was discovered in WeaselCMS v0.3.5.

LOW 39

An issue was discovered in WeaselCMS v0.3.5.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-08-05 No fix listed CWE-352

TI-2018-10764 CVE-2018-14958 · GHSA-c33m-7985-hj4w

An issue was discovered in WeaselCMS v0.3.5.

LOW 39

An issue was discovered in WeaselCMS v0.3.5.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-08-05 No fix listed CWE-352

TI-2018-10696 CVE-2018-14877 · GHSA-qwcr-wrmg-gpqr

An issue was discovered in WeaselCMS v0.3.5.

LOW 25

An issue was discovered in WeaselCMS v0.3.5.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00506 Published 2018-08-03 No fix listed CWE-79

Vulnerabilities

Filters

Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject…

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code…

An issue was discovered in WeaselCMS v0.3.5.

An issue was discovered in WeaselCMS v0.3.5.

An issue was discovered in WeaselCMS v0.3.5.