Browse CVEs

CRITICAL 9.8 CVE-2025-26136 A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1. Mysiteforme 2025-01-01+ Fix from $2,3002025-03-04 CRITICAL 9.1 CVE-2024-57763 MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField. Mysiteforme 2025-01-01+ Fix from $2,3002025-01-15 CRITICAL 9.1 CVE-2024-57764 MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add. Mysiteforme 2025-01-01+ Fix from $2,3002025-01-15 CRITICAL 9.1 CVE-2024-57766 MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField. Mysiteforme 2025-01-01+ Fix from $2,3002025-01-15 HIGH 8.6 CVE-2024-57767 MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download. Mysiteforme 2025-01-01+ Fix from $1,9502025-01-15 HIGH 7.5 CVE-2024-57765 MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list. Mysiteforme 2025-01-01+ Fix from $1,9502025-01-15 HIGH 7.5 CVE-2024-57762 MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file. Mysiteforme 2025-01-01+ Fix from $1,9502025-01-15 HIGH 8.8 CVE-2024-13139 A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main… Mysiteforme No fix yet Fix from $1,9502025-01-05 HIGH 8.8 CVE-2024-13138 A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file … Mysiteforme No fix yet Fix from $1,9502025-01-05 MEDIUM 5.4 CVE-2024-13137 A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src… Mysiteforme No fix yet Fix from $1,6002025-01-05 CRITICAL 9.8 CVE-2024-13136 A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the fi… Mysiteforme No fix yet Fix from $2,3002025-01-05 HIGH 7.5 CVE-2022-29309 mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery. Mysiteforme No fix yet Fix from $1,9502022-05-24 MEDIUM 5.4 CVE-2021-46026 mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background blog manag… Mysiteforme 2022-12-19+ Fix from $1,6002022-01-20 MEDIUM 6.5 CVE-2021-46027 mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrato… Mysiteforme No fix yet Fix from $1,6002022-01-19