Vulnerabilities > Masacms
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-02-01 | CVE-2022-47002 | Incorrect Authorization vulnerability in Masacms A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request. | 9.8 |
2022-05-05 | CVE-2021-42183 | Path Traversal vulnerability in Masacms 7.2.1 MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/. | 7.5 |