Vulnerabilities > Laracms Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-09-29 | CVE-2020-20128 | Cleartext Transmission of Sensitive Information vulnerability in Laracms Project Laracms 1.0.1 LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers. | 7.5 |
| 2021-09-29 | CVE-2020-20129 | Cross-site Scripting vulnerability in Laracms Project Laracms 1.0.1 LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor. | 5.4 |
| 2021-09-29 | CVE-2020-20131 | Cross-site Scripting vulnerability in Laracms Project Laracms 1.0.1 LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module. | 5.4 |