Vulnerabilities

TI-2021-14796 CVE-2021-36547 · GHSA-994w-w49v-wpq5

A remote code execution (RCE) vulnerability in the component…

MEDIUM 48

A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03309 Published 2021-10-28 No fix listed CWE-434

TI-2020-15551 CVE-2020-25422 · GHSA-mv97-5mx7-j96m

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows…

LOW 25

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0052 Published 2021-10-28 No fix listed CWE-79

TI-2020-14851 CVE-2020-24223 · GHSA-v5cq-8mhw-j766

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

MEDIUM 43

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.14552 Published 2020-08-30 No fix listed CWE-79

Vulnerabilities

Filters

A remote code execution (RCE) vulnerability in the component…

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows…

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.