Skip to main content

Ogma Cms

3 CVEs product

Monthly

CVE-2019-16661 Sep 21, 18:15 MEDIUM POC This Month

Ogma CMS 0.5 has XSS via creation of a new blog. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Ogma Cms Digimute
NVD GitHub
CVSS 3.1
5.4
EPSS
0.7%
CVE-2018-16380 Sep 03, 00:29 HIGH POC This Week

An issue was discovered in Ogma CMS 0.4 Beta. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Ogma Cms Digimute
NVD GitHub
CVSS 3.0
8.8
EPSS
0.6%
CVE-2018-16379 Sep 03, 00:29 MEDIUM POC This Month

Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Ogma Cms Digimute
NVD GitHub
CVSS 3.0
4.8
EPSS
0.6%
EPSS 1% CVSS 5.4
MEDIUM POC This Month

Ogma CMS 0.5 has XSS via creation of a new blog. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Ogma Cms Digimute
NVD GitHub
EPSS 1% CVSS 8.8
HIGH POC This Week

An issue was discovered in Ogma CMS 0.4 Beta. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Ogma Cms +1
NVD GitHub
EPSS 1% CVSS 4.8
MEDIUM POC This Month

Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Ogma Cms Digimute
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy