Minicms Security Vulnerabilities and Issues — Minicms CVE List

Lucene search

1234nMinicms

12 matches found

CVE•added 2022/06/13 6:15 p.m.•70 views

CVE-2021-41663

A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page.

6.1CVSS5.9AI score0.00286EPSS

CVE•added 2019/07/03 5:15 p.m.•66 views

CVE-2019-13186

In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520.

6.1CVSS5.1AI score0.0024EPSS

CVE•added 2018/08/20 7:31 p.m.•56 views

CVE-2018-1000638

MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection.

6.1CVSS6.2AI score0.00433EPSS

CVE•added 2018/08/30 10:29 p.m.•56 views

CVE-2018-16233

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter.

6.1CVSS5.2AI score0.0024EPSS

CVE•added 2018/12/27 3:29 p.m.•53 views

CVE-2018-20520

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233.

6.1CVSS5.2AI score0.0024EPSS

CVE•added 2018/04/22 2:29 p.m.•52 views

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.

6.1CVSS5.2AI score0.0024EPSS

CVE•added 2021/04/28 4:15 p.m.•50 views

CVE-2020-17999

Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php".

6.1CVSS6.3AI score0.01477EPSS

CVE•added 2018/08/27 4:29 a.m.•46 views

CVE-2018-15899

An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2024/04/26 10:15 p.m.•46 views

CVE-2024-31741

Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after login.

6.1CVSS6.9AI score0.00126EPSS

CVE•added 2018/09/14 7:29 a.m.•45 views

CVE-2018-17039

MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.

6.1CVSS5.8AI score0.0024EPSS

CVE•added 2019/03/06 7:29 p.m.•45 views

CVE-2019-9603

MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891.

6.5CVSS6.8AI score0.0038EPSS

CVE•added 2018/08/31 11:29 p.m.•40 views

CVE-2018-16298

An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request.

6.1CVSS5.9AI score0.0024EPSS