Victorcms Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Victorcms Project records in CISA KEV

No Victorcms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Victorcms · all components

TI-2020-10531 CVE-2020-13427 · GHSA-6r4p-v25c-h9rx

LOW 29

Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or user_lastname parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00874 Published 2020-06-22 No fix listed CWE-79