cxuucms
by CXUUCMS
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-28091 | Hig | 0.52 | 7.5 | 0.04 | Nov 18, 2020 | cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php. | ||
| CVE-2021-3264 | Hig | 0.47 | 7.2 | 0.01 | Aug 27, 2021 | SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php. | ||
| CVE-2021-42970 | Med | 0.40 | 6.1 | 0.01 | Mar 29, 2022 | Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter. |
- risk 0.52cvss 7.5epss 0.04
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php.
- risk 0.47cvss 7.2epss 0.01
SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.
- risk 0.40cvss 6.1epss 0.01
Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter.