Vulnerabilities (CVE)

Filtered by vendor Mipcms Subscribe
Filtered by product Mipcms
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-19263 1 Mipcms 1 Mipcms 2021-09-20 6.8 MEDIUM 8.8 HIGH
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.
CVE-2020-19264 1 Mipcms 1 Mipcms 2021-09-20 4.3 MEDIUM 6.5 MEDIUM
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.