Vendors / Schlix Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Schlix records in CISA KEV No Schlix vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain sensitive information via a crafted .phtml file.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01158 · Published 2024-01-31 · No fix listed CWE-434
Priority MEDIUM 43
Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01322 · Published 2023-02-07 · No fix listed CWE-863
Priority LOW 38
admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02236 · Published 2019-10-24 · No fix listed CWE-434
Priority LOW 26
Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00188 · Published 2025-12-22 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 4 2 0 0
