Vulnerabilities > Classcms Project

DATE CVE VULNERABILITY TITLE RISK
2022-12-22 CVE-2022-45966 Unrestricted Upload of File with Dangerous Type vulnerability in Classcms Project Classcms 3.5
here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.
network
low complexity
classcms-project CWE-434
critical
9.8
2022-03-25 CVE-2022-25582 Cross-site Scripting vulnerability in Classcms Project Classcms
A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field.
3.5