Filtered by vendor Anchorcms Subscriptions
Filtered by product Anchor Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-37732 1 Anchorcms 2 Anchor, Anchor Cms 2024-11-21 8.8 High
Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file.
CVE-2020-12071 1 Anchorcms 1 Anchor 2024-11-21 4.8 Medium
Anchor 0.12.7 allows admins to cause XSS via crafted post content.
CVE-2018-7251 1 Anchorcms 1 Anchor 2024-11-21 N/A
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error (such as "Too many connections") has occurred.