VendorsPliggpligg_cmsall versions
Vulnerabilities

Pligg CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

43CVEs
CVE-2011-3986
Cross-site scripting (XSS) vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2011-11-03 · Modified
4.3EPSS 0.013
CVE-2008-3572
Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter.
Published 2008-08-10 · Modified
4.3EPSS 0.011
CVE-2009-4788
Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/login.php and the (2) HTTP Referer header to user_settings.php.
Published 2010-04-21 · Modified
4.3EPSS 0.010
← Prev2 / 2