Search for packages
| purl | pkg:composer/gleez/cms@1.2.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-7035
|
Cross-site Scripting Cross-site scripting (XSS) vulnerability in Gleez CMS might allow remote attackers (users) to inject JavaScript via HTML content … | There are no reported fixed by versions. |
|
GHSA-7mxg-r76p-363g
Aliases: CVE-2021-27312 |
Gleez Cms Server Side Request Forgery (SSRF) vulnerability Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote … | There are no reported fixed by versions. |
|
GHSA-5qqx-32hw-5vx4
Aliases: CVE-2018-16347 |
Gleez CMS Vulnerable to Cross-site Scripting in media/imagecache/resize An issue was discovered in Gleez CMS v1.2.0. There is XSS via … | There are no reported fixed by versions. |
|
GHSA-hh92-wg7v-8vfr
Aliases: CVE-2018-16704 |
Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users An issue was discovered in Gleez CMS v1.2.0. … | There are no reported fixed by versions. |
|
GHSA-m2r2-qc49-gqw4
Aliases: CVE-2018-7035 |
Gleez CMS Stored XSS Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to … | There are no reported fixed by versions. |
|
GHSA-g644-x4hj-cmhq
Aliases: CVE-2018-15845 |
Gleez CMS CSRF Allows Adding of Administrator Accounts There is a CSRF vulnerability that can add an administrator account in … | There are no reported fixed by versions. |