waimai super cms project vulnerabilities

Recent CVEs affecting waimai super cms project products. 4 tracked.

waimai super cms project has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-10-05. Highest priority: CVE-2020-21503 (score 52/100).

• CVE-2020-21506 MEDIUM 6.1 DOWNGRADE waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Co
• CVE-2020-21505 MEDIUM 6.1 DOWNGRADE waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link
• CVE-2020-21504 MEDIUM 6.1 DOWNGRADE waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=P
• CVE-2020-21503 HIGH 7.5 DOWNGRADE waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by ob

FAQ

How do I fix waimai super cms project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is waimai super cms project being exploited right now?

None of the tracked waimai super cms project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which waimai super cms project CVE should I patch first?

CVE-2020-21503 currently ranks highest (52/100): waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by ob.

Products

• waimai super cms

RSS feed for waimai super cms project · ← Back to latest CVEs