Lucene search

Ignitedcms Security Vulnerabilities

cve

CVE-2018-15203

An issue was discovered in Ignited CMS through 2017-02-19. ign/index.php/admin/pages/add_page allows a CSRF attack to add pages.

6.5CVSS

6.4AI Score

0.001EPSS

2018-08-08 04:29 AM

cve

CVE-2019-13370

index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.

8.8CVSS

8.6AI Score

0.001EPSS

2019-07-06 10:15 PM

263

cve

CVE-2020-18694

Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/save_profile".

8.8CVSS

8.7AI Score

0.001EPSS

2021-08-06 07:15 PM