Wolfcms Wolf Cms
16 CVEs affecting Wolfcms Wolf Cms. Latest disclosed: 2022-06-09. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-6568 | High | 8.8 | 2017-04-14 | Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent… |
CVE-2015-6567 | High | 8.8 | 2017-04-14 | Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validat… |
CVE-2018-8814 | Medium | 6.5 | 2018-04-04 | Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify plugi… |
CVE-2019-10646 | Medium | 6.1 | 2019-03-30 | Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary JavaS… |
CVE-2018-1000084 | Medium | 5.4 | 2018-03-13 | WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege… |
CVE-2017-11611 | Medium | 5.4 | 2017-09-08 | Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup"… |
CVE-2012-1932 | Medium | 4.8 | 2020-02-19 | A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the setting[admin_em… |
CVE-2018-18824 | Medium | 4.8 | 2019-04-25 | WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. |
CVE-2018-18823 | Medium | 4.8 | 2019-04-25 | WolfCMS 0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. |
CVE-2018-15842 | Medium | 4.8 | 2018-08-25 | WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter. |
CVE-2018-14837 | Medium | 4.8 | 2018-08-10 | Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI. |
CVE-2018-8813 | Medium | 4.8 | 2018-04-04 | Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web… |
CVE-2018-1000087 | Medium | 4.8 | 2018-03-13 | WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files'… |
CVE-2018-6890 | Medium | 4.8 | 2018-02-22 | Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3. |
CVE-2019-25070 | Low | 3.5 | 2022-06-09 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in WolfCMS up to 0.8.3.1. It has been rated as problematic. This issue affects some unknown processin… |
CVE-2012-1897 | | 2012-10-01 | Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack the authentication of administrators f… |