MediumCVSS 5.4
EPSS 0.68%
Ogma CMS 0.5 has XSS via creation of a new blog.
Vendor
digimute vulnerabilities
3 published CVES affecting digimute, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest digimute CVEs
Newest publication first
-
-
HighCVSS 8.8 EPSS 0.61%
An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account.
-
MediumCVSS 4.8 EPSS 0.64%
Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.