Login Request a demo
BO
Product
Bosscms
by Bosscms · last CVE Jun 10, 2024
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Bosscms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-28606
9.8
2%
May 5
An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd
Affected: 1.0.0
CVE-2024-22938
7.8
0%
Jan 30
Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component
Affected: 1.3.0
CVE-2024-31609
7.1
0%
Apr 25
Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration
Affected: 3.10.0
CVE-2022-44937
6.5
0%
Nov 28
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module
Affected: 2.0.0
CVE-2024-31613
5.4
0%
Jun 10
BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code."
Affected: 3.10.0
Showing 5