CL
Vendor
Classcms
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-57099 | CL Classcms Classcms | 9.8 | Feb 3 | ClassCMS v4.8 has a code execution vulnerability |
| CVE-2024-57097 | CL Classcms Classcms | 4.8 | Feb 3 | ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php |
| CVE-2024-12666 | CL Classcms Classcms | 8.8 | Dec 16 | ClassCMS User Management Page admin insufficient privileges |
| CVE-2024-12503 | CL Classcms Classcms | 4.8 | Dec 12 | ClassCMS Model Management Page admin cross site scripting |
| CVE-2024-48180 | CL Classcms Classcms | 9.8 | Oct 16 | ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code |
| CVE-2024-8145 | CL Classcms Classcms | 4.8 | Aug 25 | ClassCMS Article admin cross site scripting |
| CVE-2024-8144 | CL Classcms Classcms | 6.1 | Aug 25 | ClassCMS Logo admin cross site scripting |
| CVE-2024-6932 | CL Classcms Classcms | 5.4 | Jul 20 | ClassCMS cross site scripting |
| CVE-2022-25581 | CL Classcms Classcms | 7.8 | Mar 18 | Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload |