Composr Cms
Compo · 3 CVEs
CVE-2020-37237
MEDIUM
Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners
May 16, 2026
CVE-2021-38708
MEDIUM
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.
Aug 16, 2021
CVE-2021-38709
MEDIUM
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system fo…
Aug 16, 2021
CVE-2018-6518
MEDIUM
Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/in…
Apr 26, 2018
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2020-37237 | Composr CMS 10.0.34 Persistent Cross-Site Scripting via banners | MEDIUM | 0.24% | May 16, 2026 |
| CVE-2021-38708 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS. | MEDIUM | 0.47% | Aug 16, 2021 |
| CVE-2021-38709 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS. | MEDIUM | 0.58% | Aug 16, 2021 |
| CVE-2018-6518 | Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php. | MEDIUM | 0.78% | Apr 26, 2018 |
Showing 1 to 3 of 3 CVEs