CVE-2022-47083

A PHP Object Injection vulnerability in the unserialize function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application...

Spitfire CMS Cross-Site Scripting Vulnerability

Spitfire CMS is a lightweight PHP-based content management system CMS. Spitfire CMS suffers from a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web script or HTML via the cmsusername parameter...