Mirasvit

mirasvit

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Full Page Cache Warmer

full_page_cache_warmer

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-45247 1Mirasvit 1Full Page Cache Warmer Jul 24, 2026 May 26, 2026 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized...Show more Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its dependencies to execute arbitrary code on the server.Show less
CVE-2017-14321 1Mirasvit 1Helpdesk Mx May 13, 2026 Sep 21, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subj...Show more Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.Show less
CVE-2017-14320 1Mirasvit 1Helpdesk Mx May 13, 2026 Sep 21, 2017 N/A· v4 8.0 HIGH· v3 6.0 MEDIUM· v2 Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.