Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior

Críticas / altas1356▲ 48 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-42970	Modificada	Media (6.1)	0.72%	—	Cxuucms	29/3/2022	17/6/2026	Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter.
CVE-2021-3264	Modificada	Alta (7.2)	0.88%	—	Cxuucms	27/8/2021	17/6/2026	SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.
CVE-2021-39599	Modificada	Media (6.1)	0.64%	—	Cxuucms	23/8/2021	17/6/2026	Multiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in (1) public/search.php and in the (2) c parameter in admin.php.
CVE-2020-29250	Modificada	Media (6.1)	0.67%	—	Cxuucms	27/12/2020	17/6/2026	CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php.
CVE-2020-29249	Modificada	Media (6.1)	0.67%	—	Cxuucms	27/12/2020	17/6/2026	CXUUCMS V3 allows class="layui-input" XSS.
CVE-2020-35347	Modificada	Media (6.5)	0.44%	—	Cxuucms	26/12/2020	17/6/2026	CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add.
CVE-2020-35346	Modificada	Media (4.8)	0.66%	—	Cxuucms	26/12/2020	17/6/2026	CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add.
CVE-2020-28091	Modificada	Alta (7.5)	3.8%	—	Cxuucms	18/11/2020	17/6/2026	cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php.