BO
Vendor
Bosscms
1 product with CVEs on record
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-31613
BO
Bosscms
Bosscms
5.4
0%
Jun 10BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code."
CVE-2024-31609
BO
Bosscms
Bosscms
7.1
0%
Apr 25Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration
CVE-2024-22938
BO
Bosscms
Bosscms
7.8
0%
Jan 30Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component
CVE-2022-44937
BO
Bosscms
Bosscms
6.5
0%
Nov 28Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module
CVE-2022-28606
BO
Bosscms
Bosscms
9.8
2%
May 5An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd