Vulnerabilities

TI-2020-14075 CVE-2020-21506 · GHSA-wcph-x5xm-mhjf

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the…

LOW 28

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-10-05 No fix listed CWE-79

TI-2020-14074 CVE-2020-21505 · GHSA-vrx6-wvfp-mmvm

LOW 28

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-10-05 No fix listed CWE-79

TI-2020-14073 CVE-2020-21504 · GHSA-h4xm-jqm7-4pj3

LOW 28

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-10-05 No fix listed CWE-79

TI-2020-14072 CVE-2020-21503 · GHSA-42wv-rq8p-rm59

LOW 35

waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0105 Published 2021-10-05 No fix listed CWE-668