Login Request a demo
CX
Product
Cxuucms
by Cxuu · last CVE Mar 29, 2022
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cxuucms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-35347
6.5
0%
Dec 26
CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add
Affected: 3.1
CVE-2021-42970
6.1
1%
Mar 29
Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter
Affected: 3.0
CVE-2021-39599
6.1
1%
Aug 23
Multiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in (1) public/search.php and in the (2) c parameter in admin.php
Affected: 3.1
CVE-2020-29250
6.1
1%
Dec 27
CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php
Affected: 3.0
CVE-2020-29249
6.1
1%
Dec 27
CXUUCMS V3 allows class="layui-input" XSS
Affected: 3.0
CVE-2020-35346
4.8
1%
Dec 26
CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of…
Affected: 3.1
Showing 6