Twilightcms Twilight Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Twilightcms Twilight Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2013-4900 — CVSS 5.0 (medium): Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read…
• CVE-2009-3856 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary…
• CVE-2013-4899 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script…