Diafan Diafan.cms
2 CVEs affecting Diafan Diafan.cms. Latest disclosed: 2023-07-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37164 | Medium | 6.1 | 2023-07-20 | Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=shop&action=search. |
CVE-2011-5318 | | 2015-01-01 | Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for r… |