PatchTheCVEweaselcms vulnerabilities and fixes
Recent CVEs affecting weaselcms, with upgrade or downgrade steps. 3 tracked.
weaselcms has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-09-23. Highest priority: CVE-2018-16352 (score 62/100).
- CVE-2018-17361 MEDIUM 6.1 DOWNGRADE Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML
- CVE-2018-16352 CRITICAL 9.8 DOWNGRADE There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the
- CVE-2018-14877 MEDIUM 5.4 DOWNGRADE An issue was discovered in WeaselCMS v0.3.5
FAQ
How do I fix weaselcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is weaselcms being exploited right now?
None of the tracked weaselcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which weaselcms CVE should I patch first?
CVE-2018-16352 currently ranks highest (62/100): There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the .