Murasoftware Mura Cms
9 CVEs affecting Murasoftware Mura Cms. Latest disclosed: 2026-03-18. Critical: 3, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-67830 | Critical | 9.8 | 2026-03-18 | Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection. |
CVE-2025-67829 | Critical | 9.8 | 2026-03-18 | Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection. |
CVE-2022-47003 | Critical | 9.8 | 2023-02-01 | A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request. |
CVE-2025-55044 | High | 8.8 | 2026-03-18 | The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CS… |
CVE-2025-55040 | High | 8.8 | 2026-03-18 | The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vuln… |
CVE-2025-55046 | High | 8.1 | 2026-03-18 | MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a sim… |
CVE-2025-55041 | High | 8.0 | 2026-03-18 | MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attacker… |
CVE-2025-55045 | High | 7.1 | 2026-03-18 | The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.up… |
CVE-2025-55043 | Medium | 6.5 | 2026-03-18 | MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated atta… |