CVE-2020-15539

CVE-2020-15539 affects We-COM Municipality portal CMS 2.1.x. Multiple connected sources confirm an SQL injection vulnerability exploitable via the cerca/ keywords field, caused by insufficient input validation and unsafe SQL construction. Public references note that exploitation could allow remot...

CVE-2020-15538

The CVE-2020-15538 entry concerns the We-COM Municipality portal CMS, version 2.1.x. Concrete details in connected documents indicate a cross-site scripting vulnerability arising from insufficient validation of client-side data in the web application, exploitable via the cerca/ search bar. Impact...