Gleezcms Gleez Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Gleezcms Gleez Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-27312 — CVSS 9.4 (critical): Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive…
• CVE-2018-15845 — CVSS 8.8 (high): There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.
• CVE-2018-16347 — CVSS 6.1 (medium): An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize.
• CVE-2018-7035 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML…