Classcms Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Classcms Project records in CISA KEV

No Classcms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Classcms 3 records MEDIUM

Records

3 records in Classcms · all components

TI-2024-06431 CVE-2024-6932 · GHSA-hvqc-vj9x-r2qv

ClassCMS cross site scripting

MEDIUM 57

A vulnerability was found in ClassCMS 4.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-07-20 No fix listed CWE-79

TI-2022-22729 CVE-2022-45966 · GHSA-fmf6-j3g7-995j

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.

MEDIUM 50

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00767 Published 2022-12-22 No fix listed CWE-434

TI-2022-09179 CVE-2022-25582 · GHSA-qc5g-r854-82rg

A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5…

LOW 25

A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2022-03-25 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0