SecurityUK records office reprimanded for CMS patch failures
ACRO's unpatched Kentico CMS exposed sensitive data of up to 10,920 people, with alerts unread for months.
> Search
9 results for “cms”
Security
SecurityCritical SQL Injection Found in Loca CMS
A critical SQL injection vulnerability in Loca Software CMS allows unauthorized attackers to gain full control over affected database systems.
SecurityCritical PHP Injection Flaw in MaxSite CMS
A critical PHP object injection vulnerability in MaxSite CMS allows unauthenticated attackers to execute arbitrary code via a malicious cookie.
SecurityMaxSite CMS Critical RCE Flaw Discovered
A critical remote code execution vulnerability in MaxSite CMS allows unauthenticated attackers to inject malicious PHP code into configuration files.
SecurityApostrophe CMS Critical Prototype Pollution
A severe vulnerability in Apostrophe allows authenticated users to bypass authorization globally, affecting all REST API endpoints for the entire process.
SecurityGrav CMS 2FA Bypass Flaw Discovered
A critical vulnerability in the Grav login plugin allows attackers to bypass two-factor authentication protections.
SecurityCMS Exploitation Campaign Signals Escalating Global Threat Landscape
The Australian Cyber Security Centre reports that malicious actors are utilizing automated tools to compromise content management systems.
SecurityWhen Trusted Add-Ons Become Silent Gateways for Web Server Takeovers
The exploitation of critical Joomla extensions highlights a broader trend of automated campaigns targeting vulnerable CMS plugins globally.
SecurityStealthy Webshell Attacks Target Vulnerable CMS Platforms
As an automated, potentially AI-assisted campaign scans for flawed plugins, small businesses face a severe rise in stealthy webshell attacks.