Laracms Project Laracms — known CVE vulnerabilities

Every CVE whose affected-product data names Laracms Project Laracms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-20128 — CVSS 7.5 (high): LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.
• CVE-2020-20129 — CVSS 5.4 (medium): LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML…
• CVE-2020-20131 — CVSS 5.4 (medium): LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML…