CVE-2020-20131

LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module...

CVE-2020-20129

CVE-2020-20129 concerns LaraCMS v1.0.1, which has a stored cross-site scripting (XSS) vulnerability in the content editor that allows attackers to execute arbitrary web scripts or HTML via crafted payloads. The Connected documents corroborate a stored XSS weakness across multiple sources (CNVD, O...

CVE-2020-20129

LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor...

CVE-2020-20128

Summary: CVE-2020-20128 affects LaraCMS v1.0.1, where sensitive information is transmitted in cleartext, potentially allowing interception. The entry lists CVSS v3.1 BaseScore 7.5 (High) and CVSS2 BaseScore 5.0 (Medium) with network attack vector and low complexity. Multiple connected sources des...

LaraCms 信息泄露漏洞

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS is vulnerable to an information disclosure vulnerability that stems from the fact that the program transmits information in plaintext, which can be exploited by attackers to cause information disclosure...

LaraCms 跨站脚本漏洞

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web scripts or HTML via specially crafted loads in the content editor...

LaraCms 跨站脚本漏洞

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS contains a cross-site scripting vulnerability, which can be exploited by attackers to execute arbitrary web scripts or HTML via specially crafted loads in the page management module...