Cross-Site Request Forgery

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to force admin…CVE-2025-55043Murasoftware · CVSS 6.5 · 0.2% likely

   CWE-352

2. The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importf…CVE-2025-55040Murasoftware · CVSS 8.8 · 0.2% likely

   CWE-352

3. MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privil…CVE-2025-55041Murasoftware · CVSS 8 · 0.2% likely

   CWE-352

4. The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF. The vulnerable c…CVE-2025-55044Murasoftware · CVSS 8.8 · 0.2% likely

   CWE-352

5. MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack. The…CVE-2025-55046Murasoftware · CVSS 8.1 · 0.1% likely

   CWE-352

6. The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.updateAddress function…CVE-2025-55045Murasoftware · CVSS 7.1 · 0.1% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.