medium5.4
CVE-2020-20129
Cross-site Scripting in LaraCMS
Impact
LaraCMS contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | wanglelecc/laracms | <= 1.0.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Laracms Project | Laracms | Version 1.0.1 |