VendorsIlchilch_cmsall versions
Vulnerabilities

Ilch CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2019-17046
Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.
Published 2019-09-30 · Modified
9.0EPSS 0.044
CVE-2019-20523
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
Published 2020-03-19 · Modified
6.1EPSS 0.007
CVE-2019-20524
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
Published 2020-03-19 · Modified
6.1EPSS 0.007
CVE-2019-20522
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
Published 2020-03-19 · Modified
6.1EPSS 0.007
CVE-2021-27352
An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.
Published 2021-03-29 · Modified
5.4EPSS 0.008
CVE-2019-17045
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
Published 2019-09-30 · Modified
4.8EPSS 0.007
CVE-2014-1944
Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry.
Published 2014-03-07 · Modified
4.31 PoCEPSS 0.033