Vulnerabilities > Publiccms > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-13 | CVE-2024-11175 | Cross-site Scripting vulnerability in Publiccms 5.202406.D A vulnerability was found in Public CMS 5.202406.d and classified as problematic. | 4.8 |
| 2024-11-11 | CVE-2024-11070 | Cross-site Scripting vulnerability in Publiccms 5.202406.D A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS 5.202406.d. | 5.4 |
| 2024-07-12 | CVE-2024-40547 | Unspecified vulnerability in Publiccms PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace. | 6.5 |
| 2024-01-10 | CVE-2023-51252 | Cross-site Scripting vulnerability in Publiccms 4.0 PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). | 5.4 |
| 2023-11-16 | CVE-2023-48204 | Server-Side Request Forgery (SSRF) vulnerability in Publiccms 4.0.202302.E An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component. | 6.5 |
| 2022-11-11 | CVE-2022-3950 | Cross-site Scripting vulnerability in Publiccms A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. | 6.1 |
| 2022-06-03 | CVE-2022-29784 | Unspecified vulnerability in Publiccms PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java. | 5.3 |
| 2021-07-09 | CVE-2020-21333 | Cross-site Scripting vulnerability in Publiccms 4.0 Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case. | 5.4 |
| 2018-11-04 | CVE-2018-18927 | Cross-site Scripting vulnerability in Publiccms 4.0 An issue was discovered in PublicCMS V4.0. | 4.8 |
| 2018-09-23 | CVE-2018-17368 | Unspecified vulnerability in Publiccms 4.0.180825 An issue was discovered in PublicCMS V4.0.180825. | 5.3 |