Vulnerabilities > Laracms Project

DATE CVE VULNERABILITY TITLE RISK
2021-09-29 CVE-2020-20128 Cleartext Transmission of Sensitive Information vulnerability in Laracms Project Laracms 1.0.1
LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.
network
low complexity
laracms-project CWE-319
5.0
2021-09-29 CVE-2020-20129 Cross-site Scripting vulnerability in Laracms Project Laracms 1.0.1
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.
3.5
2021-09-29 CVE-2020-20131 Cross-site Scripting vulnerability in Laracms Project Laracms 1.0.1
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.
3.5