Windu / Windu Cms
10 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-59116 | User enumeration in Windu CMS | MEDIUM | 6.9 | Nov 18, 2025 |
| CVE-2025-59111 | Broken Access Control in Windu CMS | MEDIUM | 6.9 | Nov 18, 2025 |
| CVE-2025-59117 | Multiple Stored XSS in Windu CMS | MEDIUM | 4.8 | Nov 18, 2025 |
| CVE-2025-59115 | Stored XSS in Windu CMS | MEDIUM | 5.3 | Nov 18, 2025 |
| CVE-2025-59114 | Cross-Site Request Forgery in Windu CMS | MEDIUM | 5.1 | Nov 18, 2025 |
| CVE-2025-59113 | Bruteforce Protection Bypass in Windu CMS | MEDIUM | 6.9 | Nov 18, 2025 |
| CVE-2025-59112 | Cross-Site Request Forgery in Windu CMS | MEDIUM | 5.1 | Nov 18, 2025 |
| CVE-2025-59110 | Cross-Site Request Forgery in Windu CMS | MEDIUM | 6.8 | Nov 18, 2025 |
| CVE-2013-7473 | Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account. | HIGH | 8.8 | Aug 1, 2019 |
| CVE-2013-7474 | Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users. | MEDIUM | 6.1 | Aug 1, 2019 |
Showing 1 to 10 of 10 CVEs