Webexcels

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Webexcels records in CISA KEV

No Webexcels vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Ecommerce Cms · all components

TI-2020-14752 CVE-2020-23976 · GHSA-hjhr-6cc5-qqgj

MEDIUM 46

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02184 Published 2020-08-27 No fix listed CWE-89

TI-2020-14751 CVE-2020-23975 · GHSA-49mx-9748-7xpc

LOW 29

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00915 Published 2020-08-27 No fix listed CWE-79