Known vulnerabilities in Frog CMS

Vendor: Frog CMS Project
Software: Frog CMS
Software CPE: cpe:2.3:a:frog_cms_project:frog_cms:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 18
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Frog CMS Frog CMS is affected by 18 known vulnerabilities: 1 high, 6 medium, 11 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35695 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1010235		 CWE-79 Low
No
No
 - 22.07.2019 SB2019072229
#VU36160 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-20772		 CWE-94 Medium
No
No
 - 11.02.2019 SB2018032207
#VU36161 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-20773		 CWE-94 Medium
No
No
 - 11.02.2019 SB2018032207
#VU36162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20774		 CWE-79 Low
No
No
 - 11.02.2019 SB2018032207
#VU36163 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-20775		 CWE-94 Medium
No
No
 - 11.02.2019 SB2018032207
#VU36164 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20776		 CWE-200 Medium
No
No
 - 11.02.2019 SB2018032207
#VU36165 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20777		 CWE-79 Low
No
No
 - 11.02.2019 SB2018032207
#VU36166 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20778		 CWE-79 Low
No
No
 - 11.02.2019 SB2018032207
#VU36242 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-6243		 CWE-79 Low
No
No
 - 12.01.2019 SB2018032207
#VU36246 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20680		 CWE-79 Low
No
No
 - 09.01.2019 SB2018032207
#VU36266 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20448		 CWE-79 Low
Available
No
 - 25.12.2018 SB2018032207
#VU14707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9991		 CWE-79 Low
No
No
 - 08.09.2018 SB2018041105
#VU14706 - Cross-Site Request Forgery (CSRF)
CVE-2018-8908		 CWE-352 Low
Available
No
 - 08.09.2018 SB2018041105
#VU36739 - Unrestricted Upload of File with Dangerous Type
CVE-2018-16373		 CWE-434 Medium
No
No
 - 03.09.2018 SB2018032207
#VU36740 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-16374		 CWE-79 Low
No
No
 - 03.09.2018 SB2018032207
#VU37134 - Unrestricted Upload of File with Dangerous Type
CVE-2018-11098		 CWE-434 Medium
No
No
 - 15.05.2018 SB2018032207
#VU14660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9992		 CWE-79 Low
No
No
 - 11.04.2018 SB2018041105
#VU37378 - Unrestricted Upload of File with Dangerous Type
CVE-2014-4912		 CWE-434 High
Available
No
 - 22.03.2018 SB2018032207