Vulnerabilities > Chemcms Project

DATE CVE VULNERABILITY TITLE RISK
2018-09-02 CVE-2018-16346 Cross-site Scripting vulnerability in Chemcms Project Chemcms 1.0.6
ChemCMS 1.0.6 has XSS via the "setting -> website information" field.
3.5
2018-04-22 CVE-2018-10295 Cross-Site Request Forgery (CSRF) vulnerability in Chemcms Project Chemcms 1.0.6
ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.
6.8