Schlix

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Schlix records in CISA KEV

No Schlix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cms 4 records HIGH

Records

6 records

TI-2021-22577 CVE-2021-47964 · GHSA-r3mq-4wxp-p8vq

Schlix CMS 2.2.6-6 Remote Code Execution via core.blockmanager

HIGH 73

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages through the block manager.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0071 Published 2026-05-15 No fix listed CWE-94

TI-2023-15102 CVE-2023-31505 · GHSA-4c3x-wrfg-6pjr

An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote…

HIGH 67

An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain sensitive information via a crafted .phtml file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01158 Published 2024-01-31 No fix listed CWE-434

TI-2022-22487 CVE-2022-45544 · GHSA-6p9h-jqfr-2f8j

Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to…

MEDIUM 43

Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01322 Published 2023-02-07 No fix listed CWE-863

TI-2019-08238 CVE-2019-11021 · GHSA-vf88-cw97-53gc

admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File…

LOW 38

admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02236 Published 2019-10-24 No fix listed CWE-434

TI-2025-41216 CVE-2025-67443 · GHSA-2j2q-7hmh-32j8

Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS).

LOW 26

Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00188 Published 2025-12-22 No fix listed CWE-79

TI-2021-22449 CVE-2021-47834 · GHSA-524r-9v5q-wjww

Schlix CMS 2.2.6-6 - 'title' Persistent Cross-Site Scripting (Authenticated)

LOW 23

Schlix CMS 2.2.6-6 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into category titles.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00269 Published 2026-01-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0