Vulnerabilities
6 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2024-7106 | A vulnerability classified as problematic was found in Spina CMS 2.18.0. A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/media_folders. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272431. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. NVD description · AI analysis pending | 6.9 | <1% | PoC |
| — | |
| CVE-2024-7065 | A vulnerability was found in Spina CMS up to 2.18.0. A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272346 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. NVD description · AI analysis pending | 6.9 | <1% | PoC |
| — | |
| CVE-2024-41603 +1 in the same advisory: …41602 | Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout. Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout. NVD description · AI analysis pending | 9.6 group max | <1% |
| — | ||
| CVE-2023-47554 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin <= 5.1.0 versions. Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin <= 5.1.0 versions. NVD description · AI analysis pending | 4.8 | <1% |
| — | ||
| CVE-2023-3445 | Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1. Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1. NVD description · AI analysis pending | 4.8 | <1% | PoC |
| — |