Read the docs

Opensourcecms

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Opensourcecms records in CISA KEV

No Opensourcecms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
60cyclecms 2 records HIGH

Records

2 records in 60cyclecms · all components

TI-2020-19245 CVE-2020-37110 · GHSA-jwv7-wwg8-6rjj

60CycleCMS 2.5.2 - 'news.php' SQL Injection Vulnerability

Priority HIGH 77

60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00415 Published 2026-02-03 No fix listed CWE-89
TI-2020-19246 CVE-2020-37111 · GHSA-jvr8-79f6-p83g

60CycleCMS 2.5.2 - 'news.php' Cross-site Scripting (XSS) Vulnerability

Priority MEDIUM 56

60CycleCMS 2.5.2 contains a cross-site scripting (XSS) vulnerability in news.php that allows attackers to inject malicious scripts through GET parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0031 Published 2026-02-03 No fix listed CWE-79
Open these records in search →