Vulnerabilities > Pyrocms > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-08-01 CVE-2022-35118 Cross-site Scripting vulnerability in Pyrocms
PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
network
low complexity
pyrocms CWE-79
6.1
6.1
2020-10-08 CVE-2020-25262 Cross-Site Request Forgery (CSRF) vulnerability in Pyrocms 3.7
PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.
network
low complexity
pyrocms CWE-352
4.3
4.3