Composr

Vendor:

First CVE: Apr 6, 2021 · Active for 5 years

3

Total CVEs

More Total CVEs than 68% of tracked products

1.5

Avg CVEs / Year

Higher CVE frequency than 59% of tracked products

8.2

Avg CVSS

Higher Avg CVSS than 75% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Composr over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 6, 2021

5 years ago

Most Recent CVE

Feb 9, 2022

1,629 days ago

CVE Severity & Scoring

Composr3 CVEs

33%

All CVEs352,785 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network3 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low3 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None2 (66.7%)

Unknown0 (0.0%)

Required1 (33.3%)

Privileges Required

Low1 (33.3%)

High0 (0.0%)

None2 (66.7%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (3 CVEs).

3 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2021-30149CRITICAL Composr 10.0.36 allows upload and execution of PHP files.	Apr 6, 2021	9.8	45	NO	YES
CVE-2021-46360HIGH Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.ph	Feb 9, 2022	8.8	42	NO	YES
CVE-2021-30150MEDIUM Composr 10.0.36 allows XSS in an XML script.	Apr 6, 2021	6.1	31	NO	YES

View all 3 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (3 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

3 CVEs

100.0% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (3 CVEs).

Media Mentions

Signals from CVEs in this product scope (3 CVEs).

Top CNAs Publishing CVEs For Composr

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	KEV	Exploits
10.0.36	2	8.0	6.4%	0	2