Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-37477
9.8
CRITICALCVSS v3
Published
July 26, 2021
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which results in arbitrary sql query execution in the backend database.
NavigateCMS/Navigate-CMS
GitHubNavigate CMS, a very powerful open source content management system for everybody.
GitHubNavigate CMS, a very powerful open source content management system for everybody.<= 2.9.4NVD