Maccms vulnerabilities

Products

• Maccms 37

Newest

• maccms Magicblack MacCMS API server-side request forgery CVE-2025-10397 5.1 MediumSeptember 14, 2025
• maccms Magicblack MacCMS Scheduled Task col_url server-side request forgery CVE-2025-10395 5.1 MediumSeptember 14, 2025
• maccms Maccms10 Database.php rep sql injection CVE-2025-10122 5.1 MediumSeptember 9, 2025
• maccms maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings. CVE-2025-45474 7.3 HighMay 29, 2025
• maccms maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link... CVE-2025-45475 5.4 MediumMay 27, 2025
• maccms maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article. CVE-2025-28091 9.1 CriticalMarch 28, 2025
• maccms maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection... CVE-2025-28090 9.1 CriticalMarch 28, 2025
• maccms maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled... CVE-2025-28089 9.1 CriticalMarch 28, 2025
• maccms A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10... CVE-2024-46654 4.8 MediumSeptember 20, 2024
• maccms Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to... CVE-2024-32391 7.3 HighApril 19, 2024
• maccms maccms10 2021.1000.2000 is vulnerable to Server-side request forgery (SSRF). CVE-2022-47872 Public exploit 8.8 HighFebruary 1, 2023
• maccms A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers... CVE-2022-44870 Public exploit 6.1 MediumJanuary 6, 2023
• maccms maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection... CVE-2022-35148 6.5 MediumAugust 17, 2022
• maccms maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the... CVE-2022-31303 5.4 MediumJune 21, 2022
• maccms maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the... CVE-2022-31302 5.4 MediumJune 21, 2022
• maccms Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter. CVE-2021-43707 6.1 MediumMarch 31, 2022
• maccms Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in ... CVE-2022-27887 6.1 MediumMarch 25, 2022
• maccms Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in ... CVE-2022-27886 6.1 MediumMarch 25, 2022
• maccms Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS)... CVE-2022-27885 6.1 MediumMarch 25, 2022
• maccms Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in ... CVE-2022-27884 6.1 MediumMarch 25, 2022
• maccms Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS)... CVE-2022-26573 6.1 MediumMarch 25, 2022
• maccms There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos.... CVE-2021-45787 5.4 MediumMarch 16, 2022
• maccms In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid"... CVE-2021-45786 9.8 CriticalMarch 16, 2022
• maccms Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the... CVE-2020-21434 5.4 MediumOctober 4, 2021
• maccms A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers... CVE-2020-21387 6.1 MediumOctober 4, 2021
• maccms A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10... CVE-2020-21386 8.8 HighOctober 4, 2021
• maccms A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html... CVE-2020-20514 8.1 HighSeptember 24, 2021
• maccms A cross-site scripting (XSS) vulnerability in the background administrator article management... CVE-2020-21082 6.1 MediumSeptember 14, 2021
• maccms A cross-site request forgery (CSRF) in Maccms 8.0 causes administrators to add and modify... CVE-2020-21081 6.5 MediumSeptember 14, 2021
• maccms An arbitrary file deletion vulnerability exists within Maccms10. CVE-2020-21363 6.5 MediumAugust 11, 2021
• maccms A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows... CVE-2020-21362 5.4 MediumAugust 11, 2021
• maccms An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows... CVE-2020-21359 9.8 CriticalAugust 11, 2021
• maccms Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of... CVE-2018-19465 6.1 MediumJune 7, 2019
• maccms Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a... CVE-2019-9829 8.8 HighMarch 15, 2019
• maccms Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html... CVE-2019-8410 6.1 MediumFebruary 27, 2019
• maccms Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts. CVE-2018-12114 Public exploit 8.8 HighJune 14, 2018
• maccms Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search... CVE-2017-17733 EPSS 44.1% 9.8 CriticalDecember 18, 2017