CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/06/2021 |
| CVE-2018-18734 | 高危8.8 | A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30. | 29/10/2018 |
| CVE-2018-18733 | 中危5.4 | An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999. | 29/10/2018 |
| CVE-2018-13999 | 中危4.8 | Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator). | 12/07/2018 |
| CVE-2018-10023 | 中危5.4 | Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun (aka an authenticated comment). | 11/04/2018 |