Vulnerabilities > Wolfcms > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-03-13 CVE-2018-1000084 Cross-site Scripting vulnerability in Wolfcms Wolf CMS 0.8.3.1
WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege user can steal the cookie of admin user and compromise the admin account.
network
low complexity
wolfcms CWE-79
5.4
2018-02-22 CVE-2018-6890 Cross-site Scripting vulnerability in Wolfcms Wolf CMS 0.8.3.1
Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3.
network
low complexity
wolfcms CWE-79
4.8
2017-09-08 CVE-2017-11611 Cross-site Scripting vulnerability in Wolfcms Wolf CMS 0.8.3.1
Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks.
network
low complexity
wolfcms CWE-79
5.4