Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

gleez/cms

6 known vulnerabilities (1 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical
Registry
Packagist

Advisories 6

  • CVE-2021-27312Critical 9.4

    Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain…

    Affected: through 1.2.0.

  • An issue was discovered in Gleez CMS v1.2.0.

    Affected: through 1.2.0.

  • An issue was discovered in Gleez CMS v1.2.0.

    Affected: through 1.2.0.

  • There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

    Affected: through 1.2.0.

  • Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary…

    Affected: through 1.3.0.

  • Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML…

    Affected: through 1.2.0; versions 2.0.0.