4 matches found
CVE-2023-48020
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/task/changeStatus...
8.8CVSS7.5AI score0.00356EPSS
SaveExploits1
CVE-2023-42279
Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form...
9.8CVSS8.3AI score0.00659EPSS
SaveExploits1References1
Dreamer CMS Cross-Site Scripting Vulnerability (CNVD-2025-04175)
Dreamer CMS is a dreamer content management system. Dreamer CMS version 4.1.3 suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the editorValue, answer and content parameters in the /admin/archives/edit...
5.1CVSS6.3AI score0.00337EPSS
SaveExploits1References1
20