Vulnerabilities (CVE)

Filtered by vendor Weaselcms Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-14958 1 Weaselcms Project 1 Weaselcms 2018-10-04 6.8 MEDIUM 8.8 HIGH
An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.
CVE-2018-14959 1 Weaselcms Project 1 Weaselcms 2018-10-04 6.8 MEDIUM 8.8 HIGH
An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI.