Cmseasy: Security Vulnerabilities
In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-02-18
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-06-02
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate.
CVSS Score
6.5
EPSS Score
0.001
Published
2018-06-02
Page 3