292 matches found
flusity CMS Security Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A security vulnerability exists in flusity-CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/addplaces.php...
CVE-2024-26349
The flusity-CMS software, specifically version v2.33 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /core/tools/delete_translation.php component, which can allow an attacker to perform unauthorized actions on behalf of a user without their knowledge or conse...
CVE-2024-26351
The flusity-CMS software, version v2.33 , is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability is located specifically within the /core/tools/update_place.php component. The vulnerability allows for unauthorized actions to be performed on behalf of an authenticated user. Whil...
CVE-2024-26489
A cross-site scripting XSS vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field...
CVE-2024-26445
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deleteplace.php...
CVE-2024-26490
A cross-site scripting (XSS) vulnerability exists in the Addon JD Simple module of flusity-CMS v2.33 . This flaw arises from the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the Title text field . Successful exploi...
CVE-2024-26445
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deleteplace.php...
CVE-2024-26351: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updateplace.php...
CVE-2024-26351
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updateplace.php...
CVE-2024-26490: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/updateplace.php...
CVE-2024-26490
A cross-site scripting XSS vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...
CVE-2024-26352
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addplaces.php...
CVE-2024-26352
flusity-CMS version v2.33 is vulnerable to a Cross-Site Request Forgery (CSRF) via the /core/tools/add_places.php component. This vulnerability allows an attacker to perform unauthorized requests on behalf of a user. To mitigate this risk, it is recommended to disable access to the affected compo...
PT-2024-21365
Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/update contact form settings.php. This allows for unauthorized actions to be performed on behalf of a user...
CVE-2024-26350: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatecontactformsettings.php...
CVE-2024-26350
Summary: CVE-2024-26350 applies to flusity-CMS v2.33, where a Cross-Site Request Forgery (CSRF) was discovered in the component /core/tools/update_contact_form_settings.php. The issue is reported across multiple feeds (RH, NVD, OSV, CVE lists) with a CVSS v3.1 base score of 8.8 (HIGH; AV:N/AC:L/P...
flusity CMS Security Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/updatecontactformsettings.php...