victorcms vulnerabilities and fixes
Recent CVEs affecting victorcms, with upgrade or downgrade steps. 1 tracked.
victorcms has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-06-22. Highest priority: CVE-2020-13427 (score 41/100).
- CVE-2020-13427 MEDIUM 6.1 DOWNGRADE Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or use
FAQ
How do I fix victorcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is victorcms being exploited right now?
None of the tracked victorcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which victorcms CVE should I patch first?
CVE-2020-13427 currently ranks highest (41/100): Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or use.