Plume Cms

plume-cms

Vendor: Pxsystem • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2010-2294

1Pxsystem

1Plume Cms

Apr 29, 2026

Jun 15, 2010

N/A· v4

N/A· v3

6.8 MEDIUM· v2

Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspe...Show more