Mara Cms Project Security Vulnerabilities

CVE-2020-24223

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme...

CVE-2021-36547

A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP...

CVE-2020-25422

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted...