Login Request a demo
CC
Product
Crafter Cms
by Craftercms · last CVE Feb 17, 2023
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 2High 12Medium 7Low 0
Severity
All severities21Critical2High12Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Crafter Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-15680
6.5
1%
Nov 27
In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data
Affected: 3.0 before 3.0.1
CVE-2017-15686
6.1
1%
Nov 27
Crafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users’ cookies
Affected: 3.0.0 before 3.0.1
CVE-2017-15682
6.1
1%
Nov 27
In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel
Affected: 3.0.0 before 3.0.1
CVE-2021-23260
5.4
0%
Dec 2
Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site
Affected: 3.1.0 before 3.1.12
CVE-2021-23261
4.9
1%
Dec 2
Authenticated administrators may override the system configuration file and cause a denial of service
Affected: 3.1.0 before 3.1.13
CVE-2021-23266
4.3
1%
May 16
An anonymous user can craft a URL with text that ends up in the log viewer as is
Affected: 3.1 before 3.1.18
CVE-2021-23265
4.3
1%
May 16
A logged-in and authenticated user with a Reviewer Role may lock a content item
Affected: 3.1 before 3.1.18
Showing 7