typesettercms kayıtları

typesettercms üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2018-6889Kavram kanıtı	An issue was discovered in Typesetter 5.1.typesettercms · typesetter · CWE-94 RCE	Yüksek8,8	—	%6,7	11 Şub 2018
35İzleyin	CVE-2022-25523İstismar yok	TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request.typesettercms · typesetter · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,6	25 Mar 2022
33İzleyin	CVE-2020-25790Kavram kanıtı	Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive.typesettercms · typesetter · CWE-434 RCE Dosya yükleme	Yüksek7,2	—	%15,6	19 Eyl 2020
33İzleyin	CVE-2018-6888Kavram kanıtı	An issue was discovered in Typesetter 5.1.typesettercms · typesetter · CWE-352 CSRF	Yüksek8,0	—	%1,9	11 Şub 2018
24İzleyin	CVE-2020-19511İstismar yok	Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,typesettercms · typesetter · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	21 Haz 2021
21İzleyin	CVE-2018-16639İstismar yok	Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation.typesettercms · typesetter · CWE-79 XSS	Orta5,4	—	%0,7	13 May 2019
19İzleyin	CVE-2018-20837İstismar yok	include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.typesettercms · typesetter · CWE-79 XSS	Orta4,8	—	%0,7	9 May 2019
19İzleyin	CVE-2020-35126İstismar yok	Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI.typesettercms · typesetter · CWE-79 XSS	Orta4,8	—	%0,7	11 Ara 2020
19İzleyin	CVE-2018-16625İstismar yok	index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.typesettercms · typesetter · CWE-79 XSS	Orta4,8	—	%0,7	13 May 2019
19İzleyin	CVE-2018-16626İstismar yok	index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name.typesettercms · typesetter · CWE-79 XSS	Orta4,8	—	%0,7	13 May 2019
19İzleyin	CVE-2025-71164İstismar yok	Typesetter CMS Reflected XSS via Editing.phptypesettercms · typesetter · CWE-79 XSS	Orta4,8	—	%0,2	14 Oca 2026
19İzleyin	CVE-2025-71165İstismar yok	Typesetter CMS Reflected XSS via Status.phptypesettercms · typesetter · CWE-79 XSS	Orta4,8	—	%0,2	14 Oca 2026
19İzleyin	CVE-2025-71166İstismar yok	Typesetter CMS Reflected XSS via Move Message Handlingtypesettercms · typesetter · CWE-79 XSS	Orta4,8	—	%0,2	14 Oca 2026
17İzleyin	CVE-2019-20077İstismar yok	The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability.typesettercms · typesetter · CWE-352 Kimlik doğrulamasız CSRF Hizmet dışı bırakma	Orta4,3	—	%0,4	5 Oca 2020

CVE-2018-6889
37İzleyin
An issue was discovered in Typesetter 5.1.
YüksekCVSS 8,8Kavram kanıtıEPSS %7
- RCE
typesettercms · typesetter11 Şub 2018
CVE-2022-25523
35İzleyin
TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request.
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
typesettercms · typesetter25 Mar 2022
CVE-2020-25790
33İzleyin
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive.
YüksekCVSS 7,2Kavram kanıtıEPSS %16
- RCE
- Dosya yükleme
typesettercms · typesetter19 Eyl 2020
CVE-2018-6888
33İzleyin
An issue was discovered in Typesetter 5.1.
YüksekCVSS 8,0Kavram kanıtıEPSS %2
- CSRF
typesettercms · typesetter11 Şub 2018
CVE-2020-19511
24İzleyin
Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
typesettercms · typesetter21 Haz 2021
CVE-2018-16639
21İzleyin
Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation.
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
typesettercms · typesetter13 May 2019
CVE-2018-20837
19İzleyin
include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
typesettercms · typesetter9 May 2019
CVE-2020-35126
19İzleyin
Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
typesettercms · typesetter11 Ara 2020
CVE-2018-16625
19İzleyin
index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
typesettercms · typesetter13 May 2019
CVE-2018-16626
19İzleyin
index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
typesettercms · typesetter13 May 2019
CVE-2025-71164
19İzleyin
Typesetter CMS Reflected XSS via Editing.php
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
typesettercms · typesetter14 Oca 2026
CVE-2025-71165
19İzleyin
Typesetter CMS Reflected XSS via Status.php
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
typesettercms · typesetter14 Oca 2026
CVE-2025-71166
19İzleyin
Typesetter CMS Reflected XSS via Move Message Handling
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
typesettercms · typesetter14 Oca 2026
CVE-2019-20077
17İzleyin
The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability.
OrtaCVSS 4,3İstismar yokEPSS %0
typesettercms · typesetter5 Oca 2020