frogcms vulnerabilities and fixes

Recent CVEs affecting frogcms, with upgrade or downgrade steps. 14 tracked.

frogcms has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-09-19. Highest priority: CVE-2024-46394 (score 42/100).

• CVE-2024-46394 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
• CVE-2024-46362 HIGH 8.8 DOWNGRADE FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
• CVE-2024-46086 HIGH 8.8 DOWNGRADE FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
• CVE-2024-46085 HIGH 8.8 DOWNGRADE FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
• CVE-2024-42632 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/a
• CVE-2024-42631 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout
• CVE-2024-42630 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
• CVE-2024-42629 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/e
• CVE-2024-42628 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippe
• CVE-2024-42627 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippe
• CVE-2024-42626 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippe
• CVE-2024-42625 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout
• CVE-2024-42624 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/d
• CVE-2024-42623 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout

FAQ

How do I fix frogcms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is frogcms being exploited right now?

None of the tracked frogcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which frogcms CVE should I patch first?

CVE-2024-46394 currently ranks highest (42/100): FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add.

RSS feed for frogcms · ← Back to latest CVEs