Vulnerabilities

TI-2014-06687 CVE-2014-8070 · GHSA-pxj9-rmgp-44pm

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to…

LOW 33

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01285 Published 2014-10-14 No fix listed

TI-2014-06686 CVE-2014-8069 · GHSA-6fhj-5f2g-4gcm

Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to index.php/user or (2) PATH_INFO to index.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00988 Published 2014-10-14 No fix listed CWE-79

Vulnerabilities

Filters

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow…