Waimai Super Cms Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Waimai Super Cms Project records in CISA KEV

No Waimai Super Cms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2020-14072 CVE-2020-21503 · GHSA-42wv-rq8p-rm59

LOW 35

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0105 Published 2021-10-05 No fix listed CWE-668

TI-2020-14075 CVE-2020-21506 · GHSA-wcph-x5xm-mhjf

LOW 28

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-10-05 No fix listed CWE-79

TI-2020-14074 CVE-2020-21505 · GHSA-vrx6-wvfp-mmvm

LOW 28

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-10-05 No fix listed CWE-79

TI-2020-14073 CVE-2020-21504 · GHSA-h4xm-jqm7-4pj3

LOW 28

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-10-05 No fix listed CWE-79