anchorcms

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

anchorcms records in CISA KEV

No anchorcms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Anchor · all components

TI-2018-05260 CVE-2018-7251 · GHSA-hxcw-pqqc-rv85

HIGH 80

An issue was discovered in config/error.php in Anchor 0.12.3.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.7183 Published 2018-02-19 Fixed in 0.12.7 CWE-200

TI-2020-09723 CVE-2020-12071 · GHSA-6q7r-xj8w-7p6h

LOW 23

Anchor 0.12.7 allows admins to cause XSS via crafted post content.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00564 Published 2020-04-23 No fix listed CWE-79