Vulnerabilities > Laracms Project > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-09-29 CVE-2020-20129 Cross-site Scripting vulnerability in Laracms Project Laracms 1.0.1
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.
network
low complexity
laracms-project CWE-79
5.4
2021-09-29 CVE-2020-20131 Cross-site Scripting vulnerability in Laracms Project Laracms 1.0.1
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.
network
low complexity
laracms-project CWE-79
5.4