Skip to content
Noroxi

wolfcms records

16 published records for vendor wolfcms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2015-6567
    38Monitor

    Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanage

    HighCVSS 8.8Proof of conceptEPSS 11%

    wolfcms · wolf cmsApr 14, 2017

  • CVE-2015-6568
    38Monitor

    Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanage

    HighCVSS 8.8Proof of conceptEPSS 11%

    wolfcms · wolf cmsApr 14, 2017

  • CVE-2018-8814
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for request

    MediumCVSS 6.5Proof of conceptEPSS 3%

    wolfcms · wolf cmsApr 4, 2018

  • CVE-2012-1897
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack the authentication

    MediumCVSS 6.8Proof of conceptEPSS 1%

    wolfcms · wolf cmsOct 1, 2012

  • CVE-2019-10646
    24Monitor

    Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add).

    MediumCVSS 6.1No exploitEPSS 1%

    wolfcms · wolf cmsMar 29, 2019

  • CVE-2019-25070
    24Monitor

    WolfCMS User Add cross site scripting

    MediumCVSS 6.1No exploitEPSS 1%

    wolfcms · wolf cmsJun 9, 2022

  • CVE-2017-11611
    21Monitor

    Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks.

    MediumCVSS 5.4Proof of conceptEPSS 1%

    wolfcms · wolf cmsSep 8, 2017

  • CVE-2018-1000084
    21Monitor

    WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can resul

    MediumCVSS 5.4No exploitEPSS 1%

    wolfcms · wolf cmsMar 13, 2018

  • CVE-2018-8813
    20Monitor

    Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect user

    MediumCVSS 4.8Proof of conceptEPSS 3%

    wolfcms · wolf cmsApr 4, 2018

  • CVE-2018-18824
    19Monitor

    WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.

    MediumCVSS 4.8No exploitEPSS 1%

    wolfcms · wolf cmsApr 25, 2019

  • CVE-2018-18823
    19Monitor

    WolfCMS 0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.

    MediumCVSS 4.8No exploitEPSS 1%

    wolfcms · wolf cmsApr 25, 2019

  • CVE-2018-6890
    19Monitor

    Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3.

    MediumCVSS 4.8Proof of conceptEPSS 1%

    wolfcms · wolf cmsFeb 22, 2018

  • CVE-2012-1932
    19Monitor

    A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via t

    MediumCVSS 4.8No exploitEPSS 1%

    wolfcms · wolf cmsFeb 19, 2020

  • CVE-2018-14837
    19Monitor

    Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI.

    MediumCVSS 4.8No exploitEPSS 1%

    wolfcms · wolf cmsAug 10, 2018

  • CVE-2018-15842
    19Monitor

    WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter.

    MediumCVSS 4.8No exploitEPSS 1%

    wolfcms · wolf cmsAug 25, 2018

  • CVE-2018-1000087
    19Monitor

    WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" inpu

    MediumCVSS 4.8No exploitEPSS 1%

    wolfcms · wolf cmsMar 13, 2018