CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/06/2021 |
| CVE-2018-18734 | ALTO8.8 | A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30. | 29/10/2018 |
| CVE-2018-18733 | MEDIO5.4 | An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999. | 29/10/2018 |
| CVE-2018-13999 | MEDIO4.8 | Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator). | 12/07/2018 |
| CVE-2018-10023 | MEDIO5.4 | Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun (aka an authenticated comment). | 11/04/2018 |