Read the docs

W-cms

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

W-cms records in CISA KEV

No W-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in W-cms · all components

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via (1) the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01879 Published 2013-01-31 No fix listed CWE-79
Open these records in search →