PatchTheCVEfrogcms project vulnerabilities
Recent CVEs affecting frogcms project products. 14 tracked.
frogcms project has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-09-19. Highest priority: CVE-2024-46394 (score 42/100).
- CVE-2024-46394 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
- CVE-2024-46362 HIGH 8.8 DOWNGRADE FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
- CVE-2024-46086 HIGH 8.8 DOWNGRADE FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
- CVE-2024-46085 HIGH 8.8 DOWNGRADE FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
- CVE-2024-42632 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/a
- CVE-2024-42631 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout
- CVE-2024-42630 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin
- CVE-2024-42629 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/e
- CVE-2024-42628 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippe
- CVE-2024-42627 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippe
- CVE-2024-42626 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippe
- CVE-2024-42625 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout
- CVE-2024-42624 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/d
- CVE-2024-42623 HIGH 8.8 DOWNGRADE FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout
FAQ
How do I fix frogcms project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is frogcms project being exploited right now?
None of the tracked frogcms project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which frogcms project CVE should I patch first?
CVE-2024-46394 currently ranks highest (42/100): FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add.