CVE Browser

Page 1

Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners

In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.

In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS.

Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php.

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2020-37237	Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners	MEDIUM	5.1	0.24%	May 16, 2026
CVE-2021-38708	In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.	MEDIUM	5.4	0.47%	Aug 16, 2021
CVE-2021-38709	In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS.	MEDIUM	6.1	0.58%	Aug 16, 2021
CVE-2018-6518	Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php.	MEDIUM	4.8	0.77%	Apr 26, 2018

Rows per page

Showing 1 to 4 CVEs · page 1