Vulnerabilities (CVE)

Filtered by vendor Xjd2020 Subscribe
Filtered by product Fastcms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-1191 1 Xjd2020 1 Fastcms 2024-04-11 5.8 MEDIUM 7.2 HIGH
A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-222363.
CVE-2022-4300 1 Xjd2020 1 Fastcms 2023-12-10 N/A 8.8 HIGH
A vulnerability was found in FastCMS. It has been rated as critical. This issue affects some unknown processing of the file /template/edit of the component Template Handler. The manipulation leads to injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214901 was assigned to this vulnerability.