PatchTheCVE: laracms projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-20131: LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbhttps://patchthecve.com/cve/CVE-2020-20131.htmlhttps://patchthecve.com/cve/CVE-2020-20131.htmlWed, 17 Jun 2026 03:02:50 +0000MEDIUM 5.4: LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.CVE-2020-20129: LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arhttps://patchthecve.com/cve/CVE-2020-20129.htmlhttps://patchthecve.com/cve/CVE-2020-20129.htmlWed, 17 Jun 2026 03:02:50 +0000MEDIUM 5.4: LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.CVE-2020-20128: LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.https://patchthecve.com/cve/CVE-2020-20128.htmlhttps://patchthecve.com/cve/CVE-2020-20128.htmlWed, 17 Jun 2026 03:02:50 +0000HIGH 7.5: LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.