Filtered by vendor Bigtreecms
Subscriptions
Filtered by product Bigtree Cms
Subscriptions
Total
44 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-26669 | 1 Bigtreecms | 1 Bigtree Cms | 2024-08-04 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update. | ||||
| CVE-2020-26670 | 1 Bigtreecms | 1 Bigtree Cms | 2024-08-04 | 8.8 High |
| A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary commands through a crafted request sent to the server via the 'Create a New Setting' function. | ||||
| CVE-2020-18467 | 1 Bigtreecms | 1 Bigtree Cms | 2024-08-04 | 5.4 Medium |
| Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP request to admin/tags/create. | ||||
| CVE-2022-36197 | 1 Bigtreecms | 1 Bigtree Cms | 2024-08-03 | 5.4 Medium |
| BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PDF file. | ||||