Vulnerabilities > Xunruicms > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-29 CVE-2023-1680 Unspecified vulnerability in Xunruicms 4.6.1
A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61.
network
low complexity
xunruicms
7.5
2023-03-29 CVE-2023-1683 Cleartext Storage of Sensitive Information vulnerability in Xunruicms 4.6.1
A vulnerability was found in Xunrui CMS 4.61 and classified as problematic.
network
low complexity
xunruicms CWE-312
7.5
2023-03-29 CVE-2023-1682 Forced Browsing vulnerability in Xunruicms 4.6.1
A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic.
network
low complexity
xunruicms CWE-425
7.5
2023-03-28 CVE-2023-1681 Unspecified vulnerability in Xunruicms 4.6.1
A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61.
network
low complexity
xunruicms
7.5
2023-03-23 CVE-2022-30037 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Xunruicms
XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.
network
low complexity
xunruicms CWE-829
7.2
2022-08-19 CVE-2022-36224 Cross-Site Request Forgery (CSRF) vulnerability in Xunruicms 4.5.6
XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).
network
low complexity
xunruicms CWE-352
8.8