CVEs published June 21, 2020
8 CVEs were published on June 21, 2020: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- concrete5/concrete5
- 1
- gogs.io/gogs
- 1
- tendenci
- 1
Medium, low and unrated 8
- CVE-2020-14959Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script
- CVE-2020-14960A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype parameter,
- CVE-2020-14961Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.concrete5/concrete5
- CVE-2020-14962Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web sc
- CVE-2020-14958In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.gogs.io/gogs
- CVE-2020-14954Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3.
- CVE-2020-14950aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=
- CVE-2020-14942Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.tendenci