Login Request a demo
PU
Product
PublicCMS
by Sanluan · last CVE Oct 13, 2026
56
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities56In the news0Timeline
Severity mix
Critical 11High 18Medium 26Low 1
Severity
All severities56Critical11High18Medium26Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add PublicCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3289
9.8
1%
Feb 27
Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal
Affected: 6.202506.d
CVE-2025-25361
9.8
1%
Mar 6
An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a…
Affected: 4.0.202406.f
CVE-2023-46990
9.8
1%
Nov 20
Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function
Affected: 4.0.202302.e
CVE-2023-34852
9.8
1%
Jun 15
PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions
Affected: through 4.0.202302
CVE-2020-20914
9.8
1%
Apr 4
SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter
Affected: 4.0
CVE-2020-20915
9.8
1%
Apr 4
SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl
Affected: 4.0
CVE-2021-27693
9.8
1%
Sep 2
Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage
Affected: before 4.0.202011.b
CVE-2022-23389
9.8
22%
Feb 14
PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter
Affected: 4.0
CVE-2021-40881
9.8
2%
Sep 15
An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code
Affected: 4.0
CVE-2018-12914
9.8
4%
Jun 27
A remote code execution issue was discovered in PublicCMS V4.0.20180210
Affected: 4.0.20180210
CVE-2025-65836
9.1
0%
Dec 1
PublicCMS V5.202506.b is vulnerable to SSRF
Affected: 5.202506.b
Showing 11