[MEDIUM] Nodcms contains a cross-site request forgery vulnerability

PKSA-j2zd-bc4z-jzrm CVE-2016-20054 GHSA-3qcm-pj6q-w4c5

Affected version: <=3.4.1

Reported by:
GitHub

[MEDIUM] NodCMS Cross Site Scripting vulnerability

PKSA-7n9d-m61f-983g CVE-2020-20697 GHSA-7xqx-xwg9-jx34

Affected version: <=3.0

Reported by:
GitHub