Skip to content
Noroxi

anchorcms records

13 published records for vendor anchorcms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
7.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2018-7251
    61This week

    An issue was discovered in config/error.php in Anchor 0.12.3.

    CriticalCVSS 9.8Proof of conceptEPSS 71%

    anchorcms · anchorFeb 19, 2018

  • CVE-2020-23342
    39Monitor

    A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.

    HighCVSS 8.8Proof of conceptEPSS 12%

    anchorcms · anchor cmsJan 19, 2021

  • CVE-2015-5687
    31Monitor

    system/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP object injection attacks and execute arbitrary

    HighCVSS 7.5No exploitEPSS 2%

    anchorcms · anchor cmsOct 5, 2015

  • CVE-2024-37732
    29Monitor

    Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file.

    MediumCVSS 6.1No exploitEPSS 16%

    anchorcms · anchor cmsJun 24, 2024

  • CVE-2024-29499
    29Monitor

    Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2.

    HighCVSS 7.4No exploitEPSS 0%

    anchorcms · anchor cmsMar 22, 2024

  • CVE-2021-44116
    24Monitor

    Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php.

    MediumCVSS 6.1No exploitEPSS 0%

    anchorcms · anchor cmsDec 15, 2021

  • CVE-2015-5060
    24Monitor

    Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.

    MediumCVSS 6.1No exploitEPSS 0%

    anchorcms · anchor cmsSep 7, 2017

  • CVE-2025-46041
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page descrip

    MediumCVSS 5.4Proof of conceptEPSS 0%

    anchorcms · anchor cmsJun 9, 2025

  • CVE-2021-46253
    21Monitor

    A cross-site scripting (XSS) vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scrip

    MediumCVSS 5.4No exploitEPSS 0%

    anchorcms · anchor cmsFeb 1, 2022

  • CVE-2020-12071
    19Monitor

    Anchor 0.12.7 allows admins to cause XSS via crafted post content.

    MediumCVSS 4.8No exploitEPSS 0%

    anchorcms · anchorApr 22, 2020

  • CVE-2022-25576
    18Monitor

    Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php.

    MediumCVSS 4.5No exploitEPSS 0%

    anchorcms · anchor cmsMar 24, 2022

  • CVE-2014-9182
    17Monitor

    models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host

    MediumCVSS 4.3No exploitEPSS 1%

    anchorcms · anchor cmsDec 2, 2014

  • CVE-2024-29338
    9Monitor

    Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2.

    LowCVSS 2.4No exploitEPSS 0%

    anchorcms · anchor cmsMar 22, 2024