Vulnerabilities > Xunruicms > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-02-02 CVE-2024-24388 Cross-site Scripting vulnerability in Xunruicms
Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.
network
low complexity
xunruicms CWE-79
6.1
2023-12-11 CVE-2023-49490 Cross-site Scripting vulnerability in Xunruicms 4.5.5
XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php.
network
low complexity
xunruicms CWE-79
6.1
2019-10-01 CVE-2019-17074 Cross-site Scripting vulnerability in Xunruicms 4.3.1
An issue was discovered in XunRuiCMS 4.3.1.
network
low complexity
xunruicms CWE-79
5.4