Skip to content
OpenAdvisories

Vendor

CouchCMS

3 known vulnerabilities.

Products

CouchCMS 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2021-47955

    CouchCMS 2.2.1 Cross-Site Scripting via SVG File Upload

    CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files through the file upload functionality. Attackers can upload SVG files containing embedded script …

    CouchCMS CouchCMS
  • Medium 4.3
    CVE-2021-47958

    CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload

    CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.p…

    CouchCMS CouchCMS