Vulnerabilities (CVE)

Filtered by vendor Anchorcms Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-46253 1 Anchorcms 1 Anchor Cms 2022-02-04 3.5 LOW 5.4 MEDIUM
A cross-site scripting (XSS) vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML.
CVE-2021-44116 1 Anchorcms 1 Anchor Cms 2021-12-20 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations.
CVE-2020-12071 1 Anchorcms 1 Anchor 2020-04-27 3.5 LOW 4.8 MEDIUM
Anchor 0.12.7 allows admins to cause XSS via crafted post content.
CVE-2015-5060 1 Anchorcms 1 Anchor Cms 2017-09-13 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.