Dilicms Dilicms
7 CVEs affecting Dilicms Dilicms. Latest disclosed: 2019-03-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19291 | Medium | 6.5 | 2018-11-15 | An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/ro… |
CVE-2018-18210 | Medium | 6.1 | 2018-10-10 | XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter. |
CVE-2018-18209 | Medium | 6.1 | 2018-10-10 | XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter. |
CVE-2019-8439 | Medium | 5.4 | 2019-03-07 | An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting->site setting" of admin/index.php, aka s… |
CVE-2019-8440 | Medium | 4.8 | 2019-03-07 | An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site setting" of admin/i… |
CVE-2019-8438 | Medium | 4.8 | 2019-03-07 | An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting->site setting" of admin/index.php, aka si… |
CVE-2018-10430 | Medium | 4.8 | 2018-04-26 | An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting->site setting" of admi… |