Login Request a demo
CL
Product
Classcms
by Classcms · last CVE Feb 3, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 2Medium 4Low 0
Severity
All severities8Critical2High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Classcms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-57099
9.8
1%
Feb 3
ClassCMS v4.8 has a code execution vulnerability
Affected: 4.8
CVE-2024-48180
9.8
1%
Oct 16
ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code
Affected: through 4.8
CVE-2024-12666
8.8
1%
Dec 16
ClassCMS User Management Page admin insufficient privileges
Affected: through 4.8
CVE-2022-25581
7.8
1%
Mar 18
Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload
Affected: through 2.5
CVE-2024-8144
6.1
0%
Aug 25
A vulnerability classified as problematic was found in ClassCMS 4.8
Affected: 4.8
CVE-2024-57097
4.8
0%
Feb 3
ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php
Affected: 4.8
CVE-2024-12503
4.8
1%
Dec 12
ClassCMS Model Management Page admin cross site scripting
Affected: 4.8
CVE-2024-8145
4.8
0%
Aug 25
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8
Affected: 4.8
Showing 8