PatchTheCVEmozilo vulnerabilities
Recent CVEs affecting mozilo products. 4 tracked.
mozilo has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-09-10. Highest priority: CVE-2024-44871 (score 54/100).
- CVE-2024-44872 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary c
- CVE-2024-44871 HIGH 7.2 DOWNGRADE An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to
- CVE-2024-2245 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting vulnerability in moziloCMS version 2.0
- CVE-2024-29368 MEDIUM 6.5 DOWNGRADE An arbitrary file upload vulnerability in the file handling module of moziloCMS v2.0 allows attackers to bypas
FAQ
How do I fix mozilo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mozilo being exploited right now?
None of the tracked mozilo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mozilo CVE should I patch first?
CVE-2024-44871 currently ranks highest (54/100): An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to.