Lucene search
+L

47839 matches found

NVD
NVD
•added 2026/09/23 7:19 p.m.•6 views

CVE-2026-76089

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action in SentNotificationsController::actionGetResendModalContent accepts a request-supplied notification ID without permission or object-level...

7.7CVSS0.00238EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/23 7:19 p.m.•8 views

CVE-2026-76087

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous formie/submissions/submit action in SubmissionsController::actionSubmit trusts a client-supplied submissionId when loading an incomplete submission without session binding, ownership validation, or a...

8.2CVSS0.00313EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/23 7:13 p.m.•10 views

CVE-2023-40028

Exploit PoC CVE-2023-40028 Vulnerabilidad de Carga de Enlace Simbólico en Ghost CMS que lleva a Lectura Arbitraria de Archivos Imagen del PoC Detalles de la Vulnerabilidad CVE-2023-40028 es una vulnerabilidad en Ghost CMS versiones anteriores a 5.59.1 , donde usuarios autenticados pueden cargar...

6.5CVSS7.1AI score0.68737EPSS
SaveExploits12References1
Kitploit
Kitploit
•added 2026/09/23 6:55 p.m.•14 views

CVE-2019-19609

Exploit de Strapi CMS Este exploit se dirige a dos vulnerabilidades en la versión 3.0.0-beta-17.4 del framework Strapi CMS, permitiendo la ejecución remota de código RCE sin autenticación. Vulnerabilidades CVE-2019-18818 Mecanismo débil de recuperación de contraseña para contraseña olvidada CVSS ...

9.8CVSS7.7AI score0.97639EPSS
SaveExploits21
Cvelist
Cvelist
•added 2026/09/23 6:35 p.m.•31 views

CVE-2026-76087 Formie: Unauthenticated users can overwrite incomplete submissions via submit action

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous formie/submissions/submit action in SubmissionsController::actionSubmit trusts a client-supplied submissionId when loading an incomplete submission without session binding, ownership validation, or a...

8.2CVSS0.00313EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 6:35 p.m.•1 views

CVE-2026-76087 Formie: Unauthenticated users can overwrite incomplete submissions via submit action

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous formie/submissions/submit action in SubmissionsController::actionSubmit trusts a client-supplied submissionId when loading an incomplete submission without session binding, ownership validation, or a...

8.2CVSS5.8AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/23 6:35 p.m.•10 views

CVE-2026-76087

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous formie/submissions/submit action in SubmissionsController::actionSubmit trusts a client-supplied submissionId when loading an incomplete submission without session binding, ownership validation, or a...

8.2CVSS5.8AI score0.00313EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 6:32 p.m.•1 views

CVE-2026-76086 Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings control panel action in IntegrationsController::actionFormSettings is reachable without the required form integration permissions and passes request-supplied settings to a...

8.5CVSS5.8AI score
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/23 6:25 p.m.•8 views

CMS-Made-Simple-2.2.9-CVE-2019-9053

Descargo de responsabilidad Este repositorio proporciona un exploit compatible con Python 3 dirigido a una vulnerabilidad de inyección SQL no autenticada en CMS Made Simple versiones 2.2.9 y anteriores. La falla, rastreada como CVE-2019-9053, permite a los atacantes extraer datos sensibles del...

8.1CVSS7.9AI score0.68581EPSS
SaveExploits38
CVE
CVE
•added 2026/09/23 6:25 p.m.•11 views

CVE-2026-76089

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action in SentNotificationsController::actionGetResendModalContent accepts a request-supplied notification ID without permission or object-level...

7.7CVSS5.7AI score0.00238EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/23 6:25 p.m.•5 views

EUVD-2026-85538

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action in SentNotificationsController::actionGetResendModalContent accepts a request-supplied notification ID without permission or object-level...

7.7CVSS5.8AI score0.00238EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/23 6:25 p.m.•7 views

CVE-2026-76089 Formie: Missing authorization on sent notification resend modal exposes submission PII

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action in SentNotificationsController::actionGetResendModalContent accepts a request-supplied notification ID without permission or object-level...

7.7CVSS5.8AI score0.00238EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/23 6:25 p.m.•3 views

CVE-2026-76089 Formie: Missing authorization on sent notification resend modal exposes submission PII

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action in SentNotificationsController::actionGetResendModalContent accepts a request-supplied notification ID without permission or object-level...

7.7CVSS5.8AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/23 6:25 p.m.•32 views

CVE-2026-76089 Formie: Missing authorization on sent notification resend modal exposes submission PII

Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action in SentNotificationsController::actionGetResendModalContent accepts a request-supplied notification ID without permission or object-level...

7.7CVSS0.00238EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/23 5:56 p.m.•12 views

CVE-2022-42094

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Card content. Attack Vectors: The attacker must post something on the "Card content" and insert the XSS payload at the "Body" input,...

4.8CVSS5.7AI score0.02677EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/23 5:49 p.m.•11 views

CVE-2022-42097

Backdrop CMS versión 1.23.0 Explicación de la vulnerabilidad: Se descubrió que Backdrop CMS versión 1.23.0 contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del Comment . Vectores de ataque: El atacante debe publicar algo en el "comentario" e insertar el payload XSS en l...

4.8CVSS5.6AI score0.00827EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/23 5:36 p.m.•11 views

CVE-2025-50286

Grav CMS v1.7.48 / Admin Plugin v1.10.48 - RCE autenticado a través de la subida de plugins CVE-2025-50286 Grav CMS v1.7.48 con Admin Plugin v1.10.48 es vulnerable a Ejecución Remota de Código RCE a través de la función de subida de plugins "Instalación Directa", permitiendo a administradores...

6.1AI score0.09643EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/23 5:33 p.m.•10 views

Mezzanine-CMS-6.1.0-XSS

Mezzanine-CMS-6.1.0-XSS CVE-2025-50481 Description A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post. CVE: CVE-2025-50481 Affected version:...

6.2AI score0.00609EPSS
SaveExploits3References2
Kitploit
Kitploit
•added 2026/09/23 5:20 p.m.•14 views

CVE-2021-38699-Reflected-XSS

CVE-2021-38699 : Multiple Reflected XSS in TastyIgniter v3.0.7 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version 3.0.7. https://vulners.com/cve/CVE-2021-38699 POC: Admin dashboard start param: root@kitploit: POST http://cvefarm.local/admin/dashboard...

5.4CVSS6.3AI score0.07977EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/23 3:56 p.m.•8 views

CVE-2018-16763

CVE-2018-16763 Exploit Title: fuel CMS 1.4.1 - Remote Code Execution Python3 script - 💻 This script was developed by h3x0v3rl0rd...

9.8CVSS8.4AI score0.82937EPSS
SaveExploits19
Rows per page
Query Builder