Murasoftware

9 CVEs across 1 Murasoftware products. Browse Murasoftware vulnerabilities, severities, and proof-of-concept exploits.

Murasoftware products with known CVEs

ProductCVEs
Mura Cms9
Murasoftware CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67830Critical9.82026-03-18Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.
CVE-2025-67829Critical9.82026-03-18Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.
CVE-2025-55046High8.12026-03-18MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a sim…
CVE-2025-55045High7.12026-03-18The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.up…
CVE-2025-55044High8.82026-03-18The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CS…
CVE-2025-55043Medium6.52026-03-18MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated atta…
CVE-2025-55041High8.02026-03-18MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attacker…
CVE-2025-55040High8.82026-03-18The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vuln…
CVE-2022-47003Critical9.82023-02-01A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.