CVE-2020-20129

CVE-2020-20129 concerns LaraCMS v1.0.1, which has a stored cross-site scripting (XSS) vulnerability in the content editor that allows attackers to execute arbitrary web scripts or HTML via crafted payloads. The Connected documents corroborate a stored XSS weakness across multiple sources (CNVD, O...

CVE-2020-20128

Summary: CVE-2020-20128 affects LaraCMS v1.0.1, where sensitive information is transmitted in cleartext, potentially allowing interception. The entry lists CVSS v3.1 BaseScore 7.5 (High) and CVSS2 BaseScore 5.0 (Medium) with network attack vector and low complexity. Multiple connected sources des...

CVE-2020-20131

CVE-2020-20131 refers to LaraCMS v1.0.1 with a stored cross-site scripting (XSS) vulnerability in the page management module. The flaw allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Exploitation details, affected variants, or remediation steps are not provided in...