Known Vulnerabilities for Minicms by 1234n
Listed below are 10 of the newest known vulnerabilities associated with "Minicms" by "1234n".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-15458 json | A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.... | Not Provided | 2026-01-05 | 2026-02-23 |
| CVE-2025-15457 json | A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/mc-ad... | Not Provided | 2026-01-05 | 2026-02-23 |
| CVE-2025-15456 json | A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin... | Not Provided | 2026-01-05 | 2026-02-23 |
| CVE-2025-15455 json | A flaw has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function delete_page of the file /minicms/mc-admin/page.ph... | Not Provided | 2026-01-05 | 2026-02-23 |
| CVE-2023-46378 json | Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string ap... | 5.4 - MEDIUM | 2023-10-31 | 2023-11-08 |
| CVE-2022-33121 json | A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on ... | 8.1 - HIGH | 2022-06-24 | 2022-06-30 |
| CVE-2021-44970 json | MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin/page-edit.php. | 5.4 - MEDIUM | 2022-02-10 | 2022-02-16 |
| CVE-2021-41663 json | A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edi... | 6.1 - MEDIUM | 2022-06-13 | 2022-06-27 |
| CVE-2021-33387 json | Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request. | 9.6 - CRITICAL | 2023-02-24 | 2023-03-06 |
| CVE-2020-36052 json | Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary ... | 9.8 - CRITICAL | 2021-01-05 | 2021-01-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | 1234n | Minicms | 1.9 | |||
| Application | 1234n | Minicms | 1.8 | |||
| Application | 1234n | Minicms | 1.7 | |||
| Application | 1234n | Minicms | 1.6 | |||
| Application | 1234n | Minicms | 1.5 | |||
| Application | 1234n | Minicms | 1.4 | |||
| Application | 1234n | Minicms | 1.3 | |||
| Application | 1234n | Minicms | 1.2 | |||
| Application | 1234n | Minicms | 1.10 | |||
| Application | 1234n | Minicms | 1.1 | |||
| Application | 1234n | Minicms | 1.0 | |||
| Application | 1234n | Minicms | 1.0 | |||
| Application | 1234n | Minicms | 1.0 | |||
| Application | 1234n | Minicms | 1.0 | |||
| Application | 1234n | Minicms | 1.0 | |||
| Application | 1234n | Minicms | 1.0 |