VendorsLaracms Projectlaracmsall versions
Vulnerabilities

Laracms Project Laracms

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2020-20128
LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.
Published 2021-09-29 · Modified
7.5EPSS 0.008
CVE-2020-20129
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.
Published 2021-09-29 · Modified
5.4EPSS 0.006
CVE-2020-20131
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.
Published 2021-09-29 · Modified
5.4EPSS 0.006