VendorsWeaselCMS projectweaselcms0.3.5
Vulnerabilities

WeaselCMS project WeaselCMS 0.3.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-14958
An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.
Published 2018-08-05 · Modified
8.8EPSS 0.005
CVE-2018-14959
An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI.
Published 2018-08-05 · Modified
8.8EPSS 0.005
CVE-2018-14877
An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page.
Published 2018-08-03 · Modified
5.4EPSS 0.005