omni cms vulnerabilities and fixes

Recent CVEs affecting omni cms, with upgrade or downgrade steps. 3 tracked.

Also searched as: omnicms.

omni cms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-06-13. Highest priority: CVE-2023-35858 (score 39/100).

• CVE-2023-35860 MEDIUM 5.3 DOWNGRADE A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attack
• CVE-2023-35859 MEDIUM 6.1 DOWNGRADE A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 a
• CVE-2023-35858 MEDIUM 5.3 DOWNGRADE XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remot

FAQ

How do I fix omni cms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is omni cms being exploited right now?

None of the tracked omni cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which omni cms CVE should I patch first?

CVE-2023-35858 currently ranks highest (39/100): XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remot.

RSS feed for omni cms · ← Back to latest CVEs