1234n Minicms vulnerabilities

• 1234n minicms bg5sbk MiniCMS Article post-edit.php improper authentication CVE-2025-15458 6.9 MediumJanuary 5, 2026
• 1234n minicms bg5sbk MiniCMS Trash File Restore post.php improper authentication CVE-2025-15457 6.9 MediumJanuary 5, 2026
• 1234n minicms bg5sbk MiniCMS Publish page-edit.php improper authentication CVE-2025-15456 Disputed 6.9 MediumJanuary 5, 2026
• 1234n minicms bg5sbk MiniCMS File Recovery Request page.php delete_page improper authentication CVE-2025-15455 6.9 MediumJanuary 5, 2026
• 1234n minicms bg5sbk MiniCMS page-edit.php cross-site request forgery CVE-2024-9282 6.9 MediumSeptember 27, 2024
• 1234n minicms bg5sbk MiniCMS post-edit.php cross-site request forgery CVE-2024-9281 6.9 MediumSeptember 27, 2024
• 1234n minicms Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary... CVE-2024-31741 6.1 MediumApril 26, 2024
• 1234n minicms Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run... CVE-2023-46378 5.4 MediumOctober 31, 2023
• 1234n minicms Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code... CVE-2021-33387 9.6 CriticalFebruary 24, 2023
• 1234n minicms File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code... CVE-2020-19896 9.8 CriticalJune 28, 2022
• 1234n minicms A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local... CVE-2022-33121 8.1 HighJune 24, 2022
• 1234n minicms A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in... CVE-2021-41663 6.1 MediumJune 13, 2022
• 1234n minicms MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin... CVE-2021-44970 5.4 MediumDecember 28, 2021
• 1234n minicms Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by... CVE-2020-17999 6.1 MediumApril 28, 2021
• 1234n minicms Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to... CVE-2020-36051 7.5 HighJanuary 5, 2021
• 1234n minicms Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to... CVE-2020-36052 9.8 CriticalJanuary 5, 2021
• 1234n minicms In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to... CVE-2019-13341 4.8 MediumJuly 5, 2019
• 1234n minicms In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker... CVE-2019-13340 4.8 MediumJuly 5, 2019
• 1234n minicms In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used... CVE-2019-13339 4.8 MediumJuly 5, 2019
• 1234n minicms In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php. An attacker can use it to get a... CVE-2019-13186 6.1 MediumJuly 3, 2019
• 1234n minicms MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different... CVE-2019-9603 6.5 MediumMarch 6, 2019
• 1234n minicms MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018... CVE-2018-20520 6.1 MediumDecember 27, 2018
• 1234n minicms MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which... CVE-2018-18892 9.8 CriticalNovember 1, 2018
• 1234n minicms MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the... CVE-2018-18891 7.5 HighNovember 1, 2018
• 1234n minicms MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an... CVE-2018-18890 5.3 MediumNovember 1, 2018
• 1234n minicms MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER[... CVE-2018-17039 6.1 MediumSeptember 14, 2018
• 1234n minicms An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for... CVE-2018-16298 6.1 MediumAugust 31, 2018
• 1234n minicms MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter. CVE-2018-16233 6.1 MediumAugust 30, 2018
• 1234n minicms An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability. CVE-2018-15899 6.1 MediumAugust 27, 2018
• 1234n minicms MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc... CVE-2018-1000638 Public exploit 6.1 MediumAugust 20, 2018
• 1234n minicms mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field. CVE-2018-10424 2.7 LowApril 26, 2018
• 1234n minicms mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the... CVE-2018-10423 2.7 LowApril 26, 2018
• 1234n minicms MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter. CVE-2018-10296 6.1 MediumApril 22, 2018
• 1234n minicms MiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter. CVE-2018-10227 5.4 MediumApril 19, 2018
• 1234n minicms There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the... CVE-2018-9092 Public exploit 8.8 HighMarch 27, 2018