Composr

composr

Vendor: Ocproducts • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-46360 1Ocproducts 1Composr Jun 17, 2026 Feb 9, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.
CVE-2021-30150 1Ocproducts 1Composr Jun 17, 2026 Apr 6, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Composr 10.0.36 allows XSS in an XML script.
CVE-2021-30149 1Ocproducts 1Composr Jun 17, 2026 Apr 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Composr 10.0.36 allows upload and execution of PHP files.