Vulnerabilidades en unitecms

29 resultados
Análisis Vexday

UniteCMS apresenta 29 vulnerabilidades registradas, todas de baixa a média severidade, sem ataques ativos documentados até o momento. A fraqueza dominante é Cross-Site Scripting (CWE-79), padrão em plataformas web, com 2 divulgações recentes nos últimos 90 dias indicando atividade contínua de descoberta.

CVE-2024-13155MEDIUMUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero WidgetEPSS 0.3%CVE-2024-13153MEDIUMUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.3%CVE-2025-13692HIGHUnlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2024-3190MEDIUMUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text FieldEPSS 0.3%CVE-2024-6171MEDIUMUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam BypassEPSS 0.2%CVE-2025-8603MEDIUMUnlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-1663MEDIUMUnlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-14274MEDIUMUnlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero WidgetEPSS 0.2%