Cxuu
Cxuucms: vulnerabilidades y CVE
Cxuucms tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-42970 | Media (6.1) | 0.72% | — | 29 mar 2022 | Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter. |
| CVE-2021-3264 | Alta (7.2) | 0.88% | — | 27 ago 2021 | SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php. |
| CVE-2021-39599 | Media (6.1) | 0.64% | — | 23 ago 2021 | Multiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in (1) public/search.php and in the (2) c parameter in admin.php. |
| CVE-2020-29250 | Media (6.1) | 0.67% | — | 27 dic 2020 | CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php. |
| CVE-2020-29249 | Media (6.1) | 0.67% | — | 27 dic 2020 | CXUUCMS V3 allows class="layui-input" XSS. |
| CVE-2020-35347 | Media (6.5) | 0.44% | — | 26 dic 2020 | CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add. |
| CVE-2020-35346 | Media (4.8) | 0.66% | — | 26 dic 2020 | CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add. |
| CVE-2020-28091 | Alta (7.5) | 3.8% | — | 18 nov 2020 | cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php. |