Vulnerabilities

TI-2020-13771 CVE-2020-20131 · GHSA-cx95-cjxc-7p38

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows…

LOW 25

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2021-09-29 No fix listed CWE-79

TI-2020-13770 CVE-2020-20129 · GHSA-m72g-42q6-gvc2

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows…

LOW 25

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2021-09-29 No fix listed CWE-79

TI-2020-13769 CVE-2020-20128 · GHSA-whm2-6mhh-gpg8

LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.

LOW 34

LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.008 Published 2021-09-29 No fix listed CWE-319

Vulnerabilities

Filters

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows…

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows…

LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.