Anchor

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-12071 Apr 23, 02:15 MEDIUM POC This Month

Anchor 0.12.7 allows admins to cause XSS via crafted post content. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Anchor Anchorcms

NVD GitHub

CVSS 3.1

4.8

EPSS

0.6%

CVE-2018-7251 Feb 19, 22:29 PHP CRITICAL POC PATCH THREAT Act Now

An issue was discovered in config/error.php in Anchor 0.12.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Anchor Anchorcms

NVD GitHub Exploit-DB

CVSS 3.0

9.8

EPSS

72.3%

CVE-2013-5099 Aug 09, 21:55 LOW POC Monitor

Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Anchor Cms Anchor

NVD Exploit-DB

CVSS 2.0

2.6

EPSS

5.0%

CVE-2020-12071

EPSS 1% CVSS 4.8

MEDIUM POC This Month

XSS Anchor Anchorcms

NVD GitHub

CVE-2018-7251 PHP

EPSS 72% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

PHP Information Disclosure Anchor +1

NVD GitHub Exploit-DB

CVE-2013-5099

EPSS 5% CVSS 2.6

LOW POC Monitor

PHP XSS Anchor Cms +1

NVD Exploit-DB