Lucene search

Mysiteforme Security Vulnerabilities

cve

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background blog management.

5.4CVSS

5.2AI Score

0.001EPSS

2022-01-20 12:15 AM

cve

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added

6.5CVSS

6.4AI Score

0.001EPSS

2022-01-19 11:15 PM

cve

CVE-2022-29309

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.

7.5CVSS

7.5AI Score

0.002EPSS

2022-05-24 03:15 AM