Lucene search
CompoComposr Cms
3 matches found
CVE-2021-38709
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS.
6.1CVSS6.3AI score0.00526EPSS
CVE-2021-38708
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.
5.4CVSS5.5AI score0.00502EPSS
CVE-2018-6518
Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php.
4.8CVSS4.8AI score0.00287EPSS