Clippercms vulnerabilities

Products

• Clippercms 10

Newest

• clippercms ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url... CVE-2022-41497 9.8 CriticalOctober 13, 2022
• clippercms ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the... CVE-2022-41495 9.8 CriticalOctober 13, 2022
• clippercms CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User... CVE-2018-12101 5.4 MediumAugust 15, 2019
• clippercms ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files. CVE-2018-19424 7.2 HighNovember 21, 2018
• clippercms ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default).... CVE-2018-19135 Public exploit 8.8 HighNovember 11, 2018
• clippercms ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2)... CVE-2018-13998 4.8 MediumJuly 12, 2018
• clippercms ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configuration" screen of the manager/ URI. CVE-2018-13106 4.8 MediumJuly 3, 2018
• clippercms ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit"... CVE-2018-11572 5.4 MediumMay 31, 2018
• clippercms ClipperCMS 1.3.3 allows Session Fixation. CVE-2018-11571 8.8 HighMay 31, 2018
• clippercms Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab... CVE-2018-11332 Public exploit 4.8 MediumMay 24, 2018