agentprime: masacmsEvery new CVE for masacms.https://agentprime.io/CVE-2026-40332: Masa CMS open redirect via improper handling of scheme-relative URLshttps://agentprime.io/advisories/CVE-2026-40332/https://agentprime.io/advisories/CVE-2026-40332/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 20:13:18 GMTCVECVE-2026-40326: Masa CMS CSRF in site bundle creation allows unauthorized site data exporthttps://agentprime.io/advisories/CVE-2026-40326/https://agentprime.io/advisories/CVE-2026-40326/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 19:57:03 GMTCVECVE-2026-40325: Masa CMS CSRF in content restoration allows unauthorized restoration of deleted contenthttps://agentprime.io/advisories/CVE-2026-40325/https://agentprime.io/advisories/CVE-2026-40325/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 19:54:29 GMTCVECVE-2026-40309: Masa CMS CSRF in trash management allows unauthorized permanent deletion of deleted contenthttps://agentprime.io/advisories/CVE-2026-40309/https://agentprime.io/advisories/CVE-2026-40309/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 19:42:23 GMTCVECVE-2026-40174: Masa CMS CSRF in user address management allows unauthorized address changeshttps://agentprime.io/advisories/CVE-2026-40174/https://agentprime.io/advisories/CVE-2026-40174/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 19:40:23 GMTCVECVE-2026-40331: Masa CMS unauthenticated SQL injection via altTable parameter in JSON APIhttps://agentprime.io/advisories/CVE-2026-40331/https://agentprime.io/advisories/CVE-2026-40331/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 19:48:07 GMTCVEcriticalCVE-2026-40330: Masa CMS SQL injection via sortDirection parameter in beanFeedhttps://agentprime.io/advisories/CVE-2026-40330/https://agentprime.io/advisories/CVE-2026-40330/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 19:46:03 GMTCVEcriticalCVE-2026-40329: SQL Injection vulnerability via sortBy in beanFeedhttps://agentprime.io/advisories/CVE-2026-40329/https://agentprime.io/advisories/CVE-2026-40329/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 19:44:32 GMTCVEcriticalCVE-2025-66492: Masa CMS vulnerable to Cross-Site Scripting (XSS) through URL Parameterhttps://agentprime.io/advisories/CVE-2025-66492/https://agentprime.io/advisories/CVE-2025-66492/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 04:50:00 GMTCVECVE-2024-32643: Masa CMS vulnerable to authentication bypass with /tag/https://agentprime.io/advisories/CVE-2024-32643/https://agentprime.io/advisories/CVE-2024-32643/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 16:43:31 GMTCVECVE-2024-32642: Host header poisoning allows account takeover via password reset emailhttps://agentprime.io/advisories/CVE-2024-32642/https://agentprime.io/advisories/CVE-2024-32642/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 16:37:53 GMTCVECVE-2024-32641: Masa CMS Vulnerable to Pre-Auth RCE via JSON APIhttps://agentprime.io/advisories/CVE-2024-32641/https://agentprime.io/advisories/CVE-2024-32641/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 16:26:00 GMTCVEcriticalCVE-2024-32640: MasaCMS SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-32640/https://agentprime.io/advisories/CVE-2024-32640/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.78 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Aug 2025 20:38:56 GMTCVEcritical