PatchTheCVEmoderncampus vulnerabilities
Recent CVEs affecting moderncampus products. 3 tracked.
moderncampus has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-06-13. Highest priority: CVE-2023-35858 (score 39/100).
- CVE-2023-35860 MEDIUM 5.3 DOWNGRADE A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attack
- CVE-2023-35859 MEDIUM 6.1 DOWNGRADE A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 a
- CVE-2023-35858 MEDIUM 5.3 DOWNGRADE XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remot
FAQ
How do I fix moderncampus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is moderncampus being exploited right now?
None of the tracked moderncampus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which moderncampus CVE should I patch first?
CVE-2023-35858 currently ranks highest (39/100): XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remot.