Vulnerabilities > WE COM > Municipality Portal CMS

DATE CVE VULNERABILITY TITLE RISK
2020-07-05 CVE-2020-15539 SQL Injection vulnerability in We-Com Municipality Portal CMS 2.1.0
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.
network
low complexity
we-com CWE-89
7.5
2020-07-05 CVE-2020-15538 Cross-site Scripting vulnerability in We-Com Municipality Portal CMS 2.1.0
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.
network
we-com CWE-79
4.3