Known vulnerabilities in Composr CMS
Vendor:
ocProducts
Software:
Composr CMS
Software CPE:
cpe:2.3:a:ocproducts:composr:*:*:*:*:*:*:*:*
Website:
https://ocproducts.com/
Total vulnerabilities:
6
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU55987 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-38709 |
CWE-79 | Low | 10.0.38 | 19.08.2021 |
SB2021081907 |
||
| #VU55986 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-38708 |
CWE-79 | Low | 10.0.38 | 19.08.2021 |
SB2021081907 |
||
| #VU52056 - Unrestricted Upload of File with Dangerous Type CVE-2021-30149 |
CWE-434 | High | 10.0.37 | 12.04.2021 |
SB2021041219 |
||
| #VU52054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-30150 |
CWE-79 | Low | 10.0.37 | 12.04.2021 |
SB2021041219 |
||
| #VU28257 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-8789 |
CWE-79 | Low | - | 26.05.2020 |
SB2020052614 |
||
| #VU37153 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-6518 |
CWE-79 | Low | - | 26.04.2018 |
SB2018042615 |