Mara Cms Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Mara Cms Project records in CISA KEV

No Mara Cms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mara Cms 3 records MEDIUM

Records

3 records in Mara Cms · all components

TI-2021-14796 CVE-2021-36547 · GHSA-994w-w49v-wpq5

A remote code execution (RCE) vulnerability in the component…

MEDIUM 48

A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03309 Published 2021-10-28 No fix listed CWE-434

TI-2020-14851 CVE-2020-24223 · GHSA-v5cq-8mhw-j766

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

MEDIUM 43

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.14552 Published 2020-08-30 No fix listed CWE-79

TI-2020-15551 CVE-2020-25422 · GHSA-mv97-5mx7-j96m

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows…

LOW 25

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0052 Published 2021-10-28 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0