Ogma CMS
by Digimute
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-16380 | Hig | 0.57 | 8.8 | 0.01 | Sep 3, 2018 | An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account. | ||
| CVE-2019-16661 | Med | 0.35 | 5.4 | 0.01 | Sep 21, 2019 | Ogma CMS 0.5 has XSS via creation of a new blog. | ||
| CVE-2018-16379 | Med | 0.31 | 4.8 | 0.01 | Sep 3, 2018 | Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen. |
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account.
- risk 0.35cvss 5.4epss 0.01
Ogma CMS 0.5 has XSS via creation of a new blog.
- risk 0.31cvss 4.8epss 0.01
Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.