52 matches found
CVE-2024-7065 Spina CMS cross-site request forgery
A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...
Spina 跨站请求伪造漏洞
Spina is an easy-to-use CMS from SpinaCMS open source. A cross-site request forgery vulnerability exists in Spina version 2.18.0 and earlier versions. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
PT-2024-29459 · Spina Cms · Spina Cms
Name of the Vulnerable Software and Affected Versions: Spina CMS versions 2.18.0 and earlier Description: The issue allows a remote attacker to escalate privileges via a crafted URL. This is related to a Cross Site Request Forgery vulnerability. Recommendations: For Spina CMS versions 2.18.0 and...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
PT-2024-29460 · Spina Cms · Spina Cms
Name of the Vulnerable Software and Affected Versions: Spina CMS version 2.18.0 Description: A Cross-Site Request Forgery CSRF issue was found in Spina CMS. The issue is related to the API endpoint "/admin/layout". Recommendations: For Spina CMS version 2.18.0, as a temporary workaround, consider...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
CVE-2024-41603
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the URI /admin/layout...
CVE-2024-41602
CVE-2024-41602 describes a Cross Site Request Forgery vulnerability in Spina CMS, affecting version 2.18.0 and earlier. The issue allows a remote attacker to escalate privileges via a crafted URL (CSRF). The root cause is a CSRF-based flaw; explicit exploit details are not provided in the availab...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
CVE-2024-41602
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL...
CVE-2024-41603
The CVE-2024-41603 entry applies to Spina CMS v2.18.0, where a Cross-Site Request Forgery (CSRF) vulnerability exists through the /admin/layout endpoint. The issue is described as a CSRF in the admin layout API, with CVSS v3.1 metrics: Network attack, low complexity, no privileges, user interacti...
GHSA-97WH-6HMJ-G8J9 Spina Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository spinacms/spina prior to 2.15.1...
CVE-2023-3445
Cross-site Scripting XSS - Stored in GitHub repository spinacms/spina prior to 2.15.1...
CVE-2023-3445 Cross-site Scripting (XSS) - Stored in spinacms/spina
Cross-site Scripting XSS - Stored in GitHub repository spinacms/spina prior to 2.15.1...
CVE-2023-3445
CVE-2023-3445 affects Spinacms/Spina CMS prior to version 2.15.1. The connected sources confirm a stored XSS vulnerability, located in the Spina admin flow (notably involving the title of pages) that can be triggered by submitting crafted input. If exploited, this could allow arbitrary script exe...