60
Product
60cyclecms
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add 60cyclecms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-37110 | 9.8 | Feb 3 | 60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input Affected: 2.5.2 |
| CVE-2020-37111 | 6.1 | Feb 3 | 60CycleCMS 2.5.2 contains a cross-site scripting (XSS) vulnerability in news.php that allows attackers to inject malicious scripts through GET parameters Affected: 2.5.2 |
Showing 2