Vulnerabilities

TI-2020-12234 CVE-2020-15538 · GHSA-phh6-whgm-9q54

XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.

LOW 29

XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00856 Published 2020-07-05 No fix listed CWE-79

TI-2020-12235 CVE-2020-15539 · GHSA-g5pr-fc9h-m955

MEDIUM 46

SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01762 Published 2020-07-05 No fix listed CWE-89

TI-2020-12236 CVE-2020-15540 · GHSA-48cf-wvgf-fhxg

MEDIUM 46

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01762 Published 2020-07-05 No fix listed CWE-89