Mara Cms Project Mara Cms
3 CVEs affecting Mara Cms Project Mara Cms. Latest disclosed: 2021-10-28. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-36547 | Critical | 9.8 | 2021-10-28 | A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a c… |
CVE-2020-24223 | Medium | 6.1 | 2020-08-30 | Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters. |
CVE-2020-25422 | Medium | 5.4 | 2021-10-28 | A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. |