Frogcms Security Vulnerabilities and Issues — Frogcms CVE List

Lucene search

Frogcms ProjectFrogcms

8 matches found

CVE•added 2018/04/24 6:29 a.m.•50 views

CVE-2018-10321

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.

4.8CVSS4.9AI score0.01287EPSS

CVE•added 2018/04/24 2:29 a.m.•37 views

CVE-2018-10318

Frog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.

4.8CVSS4.9AI score0.00235EPSS

CVE•added 2018/05/08 7:29 a.m.•37 views

CVE-2018-10806

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.

5.4CVSS5.3AI score0.00096EPSS

CVE•added 2018/04/24 2:29 a.m.•36 views

CVE-2018-10319

Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.

4.8CVSS4.8AI score0.00235EPSS

CVE•added 2018/04/24 2:29 a.m.•34 views

CVE-2018-10320

Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.

4.8CVSS4.9AI score0.00235EPSS

CVE•added 2018/12/31 3:29 p.m.•32 views

CVE-2018-19844

FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.

4.8CVSS4.8AI score0.00235EPSS

CVE•added 2018/09/04 4:29 a.m.•31 views

CVE-2018-16447

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.

8.8CVSS8.6AI score0.00141EPSS

CVE•added 2018/04/30 4:29 p.m.•30 views

CVE-2018-10570

Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.

4.8CVSS4.9AI score0.00235EPSS