Razorcms: >> Razorcms >> 3.4.8 Security Vulnerabilities
HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-12-31
Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-12-31
rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-10-05