Mara Cms ProjectCVEs & Vulnerabilities
3 CVEs affecting Mara Cms Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
mara cms 3
CVE-2021-36547CRITICAL
A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.
28 Oct 2021
9.8
CVSS
CVE-2020-25422MEDIUM
A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
28 Oct 2021
5.4
CVSS
CVE-2020-24223MEDIUMpoc
Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.
30 Aug 2020
6.1
CVSS
← PrevPage 1 / 1Next →