MA
Vendor
Magnolia-cms
10
CVEs
0
On KEV
0
New 30D
Products
MC9.8
Magnolia Cms
Magnolia-cms
9 CVEs0 on KEV0 new
MF–
Magnolia Form Module
Magnolia-cms
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-33098 | MC Magnolia Cms Magnolia-cms | 6.1 | Jul 7 | Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function |
| CVE-2021-46366 | MC Magnolia Cms Magnolia-cms | 8.8 | Feb 11 | An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute… |
| CVE-2021-46365 | MC Magnolia Cms Magnolia-cms | 7.8 | Feb 11 | An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file |
| CVE-2021-46364 | MC Magnolia Cms Magnolia-cms | 7.8 | Feb 11 | A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file |
| CVE-2021-46363 | MC Magnolia Cms Magnolia-cms | 7.8 | Feb 11 | An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files |
| CVE-2021-46362 | MC Magnolia Cms Magnolia-cms | 9.8 | Feb 11 | A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via… |
| CVE-2021-46361 | MC Magnolia Cms Magnolia-cms | 9.8 | Feb 11 | An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload |
| CVE-2021-25894 | MC Magnolia Cms Magnolia-cms | 6.1 | Apr 2 | Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter |
| CVE-2021-25893 | MC Magnolia Cms Magnolia-cms | 5.4 | Apr 2 | Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/ |
| CVE-2013-4759 | MF Magnolia Form Module Magnolia-cms | – | Aug 9 | Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary… |