Ddsn vulnerabilities
We track 3 vulnerabilities in Ddsn products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 12, 2026.
Latest Ddsn vulnerabilities
- 10.0 Critical severity
Cm3 Acora CMS: Weak Password Recovery Mechanism for Forgotten Password
A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.
- 8.8 High severity
Acora CMS: Cross-Site Request Forgery
Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external c
- 8.1 High severity
Cm3 Acora Content Management System: Improper Neutralization of Special Elements used in an SQL Command
DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by d