Vulnerabilities (CVE)

Filtered by vendor Mara Cms Project Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-36547 1 Mara Cms Project 1 Mara Cms 2024-11-21 7.5 HIGH 9.8 CRITICAL
A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.
CVE-2020-25422 1 Mara Cms Project 1 Mara Cms 2024-11-21 3.5 LOW 5.4 MEDIUM
A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVE-2020-24223 1 Mara Cms Project 1 Mara Cms 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.