maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.
CVSS Score
9.1
EPSS Score
0.0
Published
2025-03-28
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.
CVSS Score
9.1
EPSS Score
0.0
Published
2025-03-28
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.
CVSS Score
9.1
EPSS Score
0.0
Published
2025-03-28
A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score
4.8
EPSS Score
0.0
Published
2024-09-20
Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload.
CVSS Score
7.3
EPSS Score
0.001
Published
2024-04-19
A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-02-01
A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module.
CVSS Score
6.1
EPSS Score
0.002
Published
2023-01-06
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html.
CVSS Score
6.5
EPSS Score
0.001
Published
2022-08-17
maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.
CVSS Score
5.4
EPSS Score
0.001
Published
2022-06-21
Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2022-03-31
Page 1