← Back

Composr Cms

composr_cms

Vendor: Compo • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-38709
1Compo
1Composr Cms
Jun 17, 2026
Aug 16, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS.
CVE-2021-38708
1Compo
1Composr Cms
Jun 17, 2026
Aug 16, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS.
CVE-2018-6518
1Compo
1Composr Cms
Jun 17, 2026
Apr 26, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php.