Laracms Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Laracms Project records in CISA KEV

No Laracms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Laracms 3 records LOW

Records

3 records in Laracms · all components

TI-2020-13769 CVE-2020-20128 · GHSA-whm2-6mhh-gpg8

LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.

LOW 34

LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.008 Published 2021-09-29 No fix listed CWE-319

TI-2020-13771 CVE-2020-20131 · GHSA-cx95-cjxc-7p38

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows…

LOW 25

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2021-09-29 No fix listed CWE-79

TI-2020-13770 CVE-2020-20129 · GHSA-m72g-42q6-gvc2

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows…

LOW 25

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2021-09-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0