Brassica Soy Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Brassica Soy Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-15188 — CVSS 10.0 (critical): SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE). The allows remote attackers to execute any…
• CVE-2019-11376 — CVSS 7.2 (high): SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor…
• CVE-2020-15189 — CVSS 6.8 (medium): SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scripting(XSS)…