Aquila-Cms Aquilacms
2 CVEs affecting Aquila-Cms Aquilacms. Latest disclosed: 2024-10-29. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-48573 | Critical | 9.8 | 2024-10-29 | A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to reset user and administrator account passwords via the "Res… |
CVE-2024-48572 | Medium | 5.3 | 2024-10-29 | A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The v… |