Vulnerabilities > Craftcms > Craft CMS > 2.1.2563

DATE CVE VULNERABILITY TITLE RISK
2017-05-01 CVE-2017-8383 Unspecified vulnerability in Craftcms Craft CMS
Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.
network
low complexity
craftcms
5.0
2017-04-22 CVE-2017-8052 Cross-site Scripting vulnerability in Craftcms Craft CMS
Craft CMS before 2.6.2974 allows XSS attacks.
network
craftcms CWE-79
4.3