Compo Composr Cms
3 CVEs affecting Compo Composr Cms. Latest disclosed: 2021-08-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38709 | Medium | 6.1 | 2021-08-16 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS. |
CVE-2021-38708 | Medium | 5.4 | 2021-08-16 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS. |
CVE-2018-6518 | Medium | 4.8 | 2018-04-26 | Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php. |