PopojiCMS

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

PopojiCMS records in CISA KEV

No PopojiCMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Popojicms 15 records HIGH

Records

15 records

TI-2022-23699 CVE-2022-47766 · GHSA-cwpg-w65c-x3h2

PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability.

HIGH 73

PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00811 Published 2023-01-19 No fix listed CWE-434

TI-2024-38381 CVE-2024-58284 · GHSA-jg32-m8mr-6xvg

PopojiCMS 2.0.1 Remote Command Execution via Authenticated Metadata Settings

HIGH 72

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01102 Published 2025-12-10 No fix listed CWE-94

TI-2018-13414 CVE-2018-18934 · GHSA-f6jc-7p8x-395g

An issue was discovered in PopojiCMS v2.0.1.

MEDIUM 44

An issue was discovered in PopojiCMS v2.0.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00812 Published 2018-11-05 No fix listed CWE-352

TI-2019-06974 CVE-2019-9549 · GHSA-7c5h-q9q6-c675

An issue was discovered in PopojiCMS v2.0.1.

LOW 39

An issue was discovered in PopojiCMS v2.0.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2019-03-03 No fix listed CWE-352

TI-2018-13415 CVE-2018-18935 · GHSA-29v9-m8r8-v85x

An issue was discovered in PopojiCMS v2.0.1.

LOW 39

An issue was discovered in PopojiCMS v2.0.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00587 Published 2018-11-05 No fix listed CWE-352

TI-2018-13416 CVE-2018-18936 · GHSA-gqr3-6vm6-j9j9

An issue was discovered in PopojiCMS v2.0.1.

LOW 38

An issue was discovered in PopojiCMS v2.0.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02506 Published 2018-11-05 No fix listed CWE-22

TI-2023-27359 CVE-2023-50011 · GHSA-mj5m-hchj-w87j

PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field.

LOW 36

PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02037 Published 2023-12-14 No fix listed

TI-2020-13642 CVE-2020-19547 · GHSA-xm77-r4gq-gm87

Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php.

LOW 31

Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01211 Published 2021-08-25 No fix listed CWE-22

TI-2020-14035 CVE-2020-21357 · GHSA-whhj-57f7-8564

A stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of…

LOW 29

A stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00782 Published 2021-08-06 No fix listed CWE-79

TI-2019-13552 CVE-2019-18816 · GHSA-r8qm-3wgq-vf9w

po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.

LOW 29

po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00812 Published 2019-11-07 No fix listed CWE-79

TI-2023-05442 CVE-2023-5910 · GHSA-vq49-7r44-hh7p

PopojiCMS Web Config install.php cross site scripting

LOW 28

A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00509 Published 2023-11-01 No fix listed CWE-79

TI-2019-13551 CVE-2019-18815 · GHSA-m96w-6w33-g867

PopojiCMS 2.0.1 allows refer= Open Redirection.

LOW 28

PopojiCMS 2.0.1 allows refer= Open Redirection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2019-11-07 No fix listed CWE-601

TI-2020-14034 CVE-2020-21356 · GHSA-2pqp-x768-f3m2

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical…

LOW 26

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00897 Published 2021-08-06 No fix listed CWE-668

TI-2020-13303 CVE-2020-18065 · GHSA-33r9-rrvf-c2gq

Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu.

LOW 25

Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00516 Published 2021-08-25 No fix listed CWE-79

TI-2021-09330 CVE-2021-28070 · GHSA-3xwg-7j63-2p52

Cross Site Request Forgery (CSRF) vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete.

LOW 20

Cross Site Request Forgery (CSRF) vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00361 Published 2021-08-25 No fix listed CWE-352

Open these records in search →

Critical	1
High	6
Medium	8
Low	0
No CVSS	0