Login Request a demo
MC
Product
Magnolia Cms
by Magnolia-cms · last CVE Jul 7, 2022
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 4Medium 3Low 0
Severity
All severities9Critical2High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Magnolia Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-46362
9.8
5%
Feb 11
A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via…
Affected: before 6.2.4
CVE-2021-46361
9.8
3%
Feb 11
An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload
Affected: before 6.2.12
CVE-2021-46366
8.8
1%
Feb 11
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute…
Affected: before 6.2.4
CVE-2021-46365
7.8
2%
Feb 11
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file
Affected: before 6.2.4
CVE-2021-46364
7.8
2%
Feb 11
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file
Affected: before 6.2.4
CVE-2021-46363
7.8
2%
Feb 11
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files
Affected: before 6.2.4
CVE-2022-33098
6.1
53%
Jul 7
Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function
Affected: 6.2.19
CVE-2021-25894
6.1
1%
Apr 2
Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter
Affected: 6.1.3 before 6.1.7; 6.2.3 before 6.2.4
CVE-2021-25893
5.4
1%
Apr 2
Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/
Affected: 6.1.3 before 6.1.7; 6.2.3 before 6.2.4
Showing 9