VendorsWebBosswebboss.io_cmsall versions
Vulnerabilities

WebBoss CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-36339
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.
Published 2023-07-21 · Modified
7.5EPSS 0.006
CVE-2023-37742
WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.
Published 2023-07-21 · Modified
6.1EPSS 0.005
CVE-2023-39096
WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.
Published 2023-08-03 · Modified
5.4EPSS 0.003
CVE-2023-39097
WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.
Published 2023-08-03 · Modified
5.4EPSS 0.003