Digimute Ogma Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Digimute Ogma Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-16380 — CVSS 8.8 (high): An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account.
• CVE-2019-16661 — CVSS 5.4 (medium): Ogma CMS 0.5 has XSS via creation of a new blog.
• CVE-2018-16379 — CVSS 4.8 (medium): Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.