HighCVSS 8.8
EPSS 0.31%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
Product
frogcms project frogcms vulnerabilities
24 published CVES affecting frogcms project frogcms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 24
- Critical
- 1
- High
- 15
- Medium
- 8
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest frogcms project frogcms CVEs
Newest publication first
-
-
HighCVSS 8.8 EPSS 0.30%
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
-
HighCVSS 8.8 EPSS 0.32%
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
-
HighCVSS 8.8 EPSS 0.24%
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
-
HighCVSS 8.8 EPSS 0.30%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_file.
-
HighCVSS 8.8 EPSS 0.30%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.
-
HighCVSS 8.8 EPSS 0.22%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/edit/10.
-
HighCVSS 8.8 EPSS 0.33%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/edit/1.
-
HighCVSS 8.8 EPSS 0.33%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.
-
HighCVSS 8.8 EPSS 0.30%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1
-
HighCVSS 8.8 EPSS 0.30%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/edit/3.
-
HighCVSS 8.8 EPSS 0.22%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add
-
HighCVSS 8.8 EPSS 0.30%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.
-
HighCVSS 8.8 EPSS 0.30%
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.
-
MediumCVSS 4.9 EPSS 1.2%
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
-
CriticalCVSS 9.8 EPSS 1.6%
Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
-
MediumCVSS 4.8 EPSS 0.56%
FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.
-
HighCVSS 8.8 EPSS 0.71%
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
-
MediumCVSS 5.4 EPSS 0.33%
An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
-
MediumCVSS 4.8 EPSS 0.52%
Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.
-
MediumCVSS 4.8 EPSS 1.8%
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
-
MediumCVSS 4.8 EPSS 0.52%
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.
-
MediumCVSS 4.8 EPSS 0.54%
Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.
-
MediumCVSS 4.8 EPSS 0.54%
Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.