Vendors / chshcms Records 53 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 8
CVSS high 34
Exploited now chshcms records in CISA KEV No chshcms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0098 · Published 2023-04-28 · No fix listed CWE-89
Priority HIGH 73
mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF).
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00295 · Published 2023-04-28 · No fix listed CWE-352
Priority MEDIUM 62
MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00294 · Published 2025-08-06 · No fix listed CWE-918
Priority MEDIUM 62
An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security characters.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2023-04-28 · No fix listed CWE-94
Priority MEDIUM 60
MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00258 · Published 2025-08-21 · No fix listed CWE-552
Priority MEDIUM 58
An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a crafted GET request.
CVSS 3.1 MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.00227 · Published 2025-07-14 · No fix listed CWE-598
Priority MEDIUM 57
A vulnerability was found in chshcms mccms 2.7.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01309 · Published 2025-05-29 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was found in chshcms mccms 2.7.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00564 · Published 2025-05-29 · No fix listed CWE-918
Priority LOW 39
A vulnerability, which was classified as critical, was found in mccms 2.6.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00641 · Published 2023-09-17 · No fix listed CWE-89
Priority LOW 39
A vulnerability classified as critical has been found in mccms up to 2.6.5.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00701 · Published 2023-06-14 · No fix listed CWE-918
Priority LOW 39
A vulnerability was found in mccms up to 2.6.5.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00701 · Published 2023-06-14 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
8 34 11 0 0
THREATIST.IORead the docs