Known Vulnerabilities for products from Wolfcms
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Wolfcms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-25070 json | ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in WolfCMS up to 0.8.3.1. It has b... | 6.1 - MEDIUM | 2022-06-09 | 2023-11-07 |
| CVE-2019-10646 json | Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an ... | 6.1 - MEDIUM | 2019-03-30 | 2020-07-29 |
| CVE-2018-1000087 json | WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New ... | 4.8 - MEDIUM | 2018-03-13 | 2018-04-10 |
| CVE-2018-1000084 json | WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab)... | 5.4 - MEDIUM | 2018-03-13 | 2018-04-06 |
| CVE-2018-18824 json | WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. | 4.8 - MEDIUM | 2019-04-25 | 2020-07-29 |
| CVE-2018-18823 json | WolfCMS 0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. | 4.8 - MEDIUM | 2019-04-25 | 2020-07-29 |
| CVE-2018-15842 json | WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter. | 4.8 - MEDIUM | 2018-08-25 | 2018-10-17 |
| CVE-2018-14837 json | Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI. | 4.8 - MEDIUM | 2018-08-10 | 2018-10-05 |
| CVE-2018-8814 json | Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of us... | 6.5 - MEDIUM | 2018-04-04 | 2018-05-09 |
| CVE-2018-8813 json | Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers t... | 4.8 - MEDIUM | 2018-04-04 | 2018-05-10 |
| CVE-2018-6890 json | Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/e... | 4.8 - MEDIUM | 2018-02-22 | 2018-03-06 |
| CVE-2017-11611 json | Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the ... | 5.4 - MEDIUM | 2017-09-08 | 2017-09-14 |
| CVE-2015-6568 json | Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka... | Not Provided | 2017-04-14 | 2025-04-20 |
| CVE-2015-6567 json | Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka... | Not Provided | 2017-04-14 | 2025-04-20 |
| CVE-2012-1932 json | A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web scrip... | 4.8 - MEDIUM | 2020-02-19 | 2020-02-20 |
| CVE-2012-1897 json | Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack the ... | Not Provided | 2012-10-01 | 2026-04-29 |