Read the docs

Classcms

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Classcms records in CISA KEV

No Classcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Classcms 8 records HIGH

Records

8 records

TI-2024-07551 CVE-2024-8144 · GHSA-4gmx-cpwm-vfgx

ClassCMS Logo admin cross site scripting

Priority MEDIUM 57

A vulnerability classified as problematic was found in ClassCMS 4.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00435 Published 2024-08-25 No fix listed CWE-79
TI-2024-07552 CVE-2024-8145 · GHSA-3hfc-7w8c-chcm

ClassCMS Article admin cross site scripting

Priority MEDIUM 56

A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00448 Published 2024-08-25 No fix listed CWE-80
TI-2024-32294 CVE-2024-48180 · GHSA-3p3h-5g54-qmc8

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method…

Priority MEDIUM 50

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00611 Published 2024-10-16 No fix listed CWE-434
Open these records in search →