4.3
Medium
CVE-2025-54045 Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace…
Description
Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CM On Demand Search And Replace 1.5 | earliest → 1.5.5 | No fix stated |
Other CVEs of CM On Demand Search And Replace
The 5 CVEs of CM On Demand Search And Replace →
CVE-2025-54727
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…
5.9
Medium
CVE-2025-54728
Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace…
4.3
Medium
CVE-2023-28749
Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace…
4.3
Medium
CVE-2023-31228
Auth
5.9
Medium