Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2543▼ 416 respecto a la semana anterior
Críticas / altas1316▲ 27 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)59▼ 467 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.45% | — | Xyhcms | 6/10/2021 | 17/6/2026 | XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index. | |
| Modificada | Media (4.5) | 0.39% | — | Xyhcms | 8/7/2021 | 9/7/2026 | A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password. | |
| Modificada | Alta (8.8) | 0.49% | — | Xyhcms | 24/7/2018 | 17/6/2026 | xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account. | |
| Modificada | Media (6.1) | 0.65% | — | Xyhcms Project Xyhcms | 16/4/2018 | 17/6/2026 | An issue was discovered in XYHCMS 3.5. It has XSS via the test parameter to index.php. | |
| Modificada | Alta (8.8) | 0.47% | — | Xyhcms Project Xyhcms | 16/4/2018 | 17/6/2026 | An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account with the administrator role. |