Semcms vulnerabilities | LiveThreat CVE Feed

Product

Semcms

by Sem-cms · last CVE Jan 29, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities59 In the news0 Timeline

Severity mix

Critical 22High 10Medium 26Low 1

Severity

All severities59 Critical22 High10 Medium26 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Semcms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-4595	6.5	1%	May 7	A vulnerability has been found in SEMCMS up to 4.8 and classified as critical Affected: through 4.8
CVE-2024-31009	6.5	1%	Apr 3	SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php Affected: 4.8
CVE-2021-38728	6.1	1%	Oct 28	SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php Affected: 1.1
CVE-2018-18783	6.1	1%	Oct 29	XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter Affected: 3.4
CVE-2024-36801	5.9	0%	Jun 4	A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php Affected: 4.8
CVE-2025-51660	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php Affected: through 5.0
CVE-2025-51659	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php Affected: through 5.0
CVE-2025-51658	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php Affected: through 5.0
CVE-2025-51657	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php Affected: through 5.0
CVE-2025-51656	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php Affected: through 5.0
CVE-2025-51655	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php Affected: through 5.0
CVE-2025-51654	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php Affected: through 5.0
CVE-2025-51653	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php Affected: through 5.0
CVE-2025-51652	5.4	0%	Jul 14	SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php Affected: through 5.0
CVE-2018-18840	5.4	1%	Oct 30	XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter Affected: 3.4
CVE-2024-13193	4.9	1%	Jan 8	SEMCMS Image Library Management Page SEMCMS_Images.php sql injection Affected: through 4.8
CVE-2024-52725	4.9	1%	Nov 20	SemCms v4.8 was discovered to contain a SQL injection vulnerability Affected: 4.8
CVE-2018-20017	4.8	1%	Dec 10	SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI Affected: 3.5
CVE-2018-18841	4.8	1%	Oct 30	XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter Affected: 3.4
CVE-2018-18745	4.8	1%	Oct 29	An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing Affected: 3.4
CVE-2018-18744	4.8	1%	Oct 29	An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI Affected: 3.4
CVE-2018-18743	4.8	1%	Oct 29	An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI Affected: 3.4
CVE-2018-18741	4.8	1%	Oct 29	An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing Affected: 3.4
CVE-2018-18740	4.8	1%	Oct 29	An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI Affected: 3.4
CVE-2018-18739	4.8	1%	Oct 29	An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field Affected: 3.4
CVE-2018-18738	4.8	1%	Oct 29	An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter Affected: 3.4