Murasoftware vulnerabilities
We track 5 vulnerabilities in Murasoftware products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2026.
Latest Murasoftware vulnerabilities
- 8.1 High severity
Mura CMS: Cross-Site Request Forgery
MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack. The vulnerable cTrash.empty function lacks CSRF token validation, enabling malicious
- 7.1 High severity
Mura CMS: Cross-Site Request Forgery
The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.updateAddress function lacks CSRF token validation, enabling malicious websites to forge requests that
- 8.8 High severity
Mura CMS: Cross-Site Request Forgery
The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF. The vulnerable cTrash.restore function lacks CSRF token validation, enabling malicious websites t
- 8.0 High severity
Mura CMS: Cross-Site Request Forgery
MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privileges by adding any user to any group without proper authorization checks. The vul
- 8.8 High severity
Mura CMS: Cross-Site Request Forgery
The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importform function lacks CSRF token validation, enabling malicious websites to forge fi