PatchTheCVEwaimai super cms vulnerabilities and fixes
Recent CVEs affecting waimai super cms, with upgrade or downgrade steps. 4 tracked.
Also searched as: waimaisupercms.
waimai super cms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-10-05. Highest priority: CVE-2020-21503 (score 52/100).
- CVE-2020-21506 MEDIUM 6.1 DOWNGRADE waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Co
- CVE-2020-21505 MEDIUM 6.1 DOWNGRADE waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link
- CVE-2020-21504 MEDIUM 6.1 DOWNGRADE waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=P
- CVE-2020-21503 HIGH 7.5 DOWNGRADE waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by ob
FAQ
How do I fix waimai super cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is waimai super cms being exploited right now?
None of the tracked waimai super cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which waimai super cms CVE should I patch first?
CVE-2020-21503 currently ranks highest (52/100): waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by ob.