Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2622▼ 226 respecto a la semana anterior
Críticas / altas1383▲ 155 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.1) | 0.24% | — | Composr CMSAI | 16/5/2026 | 29/9/2026 | Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner management interface. Attackers with admin credentials can inject XSS payloads in the Description field of the Add banner functionality, which execute for… | |
| Modificada | Alta (8.8) | 9.2% | — | Ocproducts Composr | 9/2/2022 | 17/6/2026 | Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr. | |
| Modificada | Media (6.1) | 0.58% | — | Composr CMS | 16/8/2021 | 17/6/2026 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS. | |
| Modificada | Media (5.4) | 0.47% | — | Composr CMS | 16/8/2021 | 17/6/2026 | In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS. | |
| Modificada | Media (6.1) | 2.8% | — | Ocproducts Composr | 6/4/2021 | 17/6/2026 | Composr 10.0.36 allows XSS in an XML script. | |
| Modificada | Crítica (9.8) | 10% | — | Ocproducts Composr | 6/4/2021 | 17/6/2026 | Composr 10.0.36 allows upload and execution of PHP files. | |
| Modificada | Media (5.4) | 0.65% | — | Composr Project Composr | 22/5/2020 | 17/6/2026 | Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration. | |
| Modificada | Media (4.8) | 0.78% | — | Composr CMS | 26/4/2018 | 17/6/2026 | Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php. |