Vendorswangl1989mysiteformeany version
Vulnerabilities

wangl1989 Mysiteforme (MSFM) any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2025-26136
A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
Published 2025-03-04 · Analyzed
9.8EPSS 0.004
CVE-2024-57763
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.
Published 2025-01-14 · Analyzed
9.1EPSS 0.005
CVE-2024-57764
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.
Published 2025-01-14 · Analyzed
9.1EPSS 0.005
CVE-2024-57766
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.
Published 2025-01-14 · Analyzed
9.1EPSS 0.005
CVE-2024-57767
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.
Published 2025-01-14 · Analyzed
8.6EPSS 0.004
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.
Published 2025-01-14 · Analyzed
7.5EPSS 0.005
CVE-2024-57765
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.
Published 2025-01-14 · Analyzed
7.5EPSS 0.004
CVE-2021-46027
mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added
Published 2022-01-19 · Modified
6.5EPSS 0.004
CVE-2021-46026
mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background blog management.
Published 2022-01-19 · Analyzed
5.4EPSS 0.004