Plume Cms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-1414 MEDIUM POC This Month

Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

CSRF PHP Plume Cms

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.2%

CVE-2012-2156 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Plume Cms

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

2.2%

CVE-2012-1414

EPSS 0% CVSS 6.8

MEDIUM POC This Month

CSRF PHP Plume Cms

NVD Exploit-DB

CVE-2012-2156

EPSS 2% CVSS 4.3

MEDIUM POC This Month

PHP XSS Plume Cms

NVD Exploit-DB