High severity7.3NVD Advisory· Published Nov 2, 2026

CVE-2026-120347

Description

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231. The affected component should be upgraded.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Finecms Project/Xunruicmsllm-create
Range: <=4.7.4

Patches

Vulnerability mechanics

References

gitee.com/dayrui/xunruicms/commit/9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231nvd
github.com/tiranbge/disclosure-xunruicms-4.7.2/blob/master/reports/3.mdnvd
vuldb.com/cve/CVE-2026-120347nvd
vuldb.com/submit/1016284nvd
vuldb.com/vuln/429671nvd
vuldb.com/vuln/429671/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000