Vulnerabilities

TI-2025-13822 CVE-2025-15144 · GHSA-v539-hv42-wghc

dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting

MEDIUM 57

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0037 Published 2025-12-28 No fix listed CWE-79

TI-2025-12799 CVE-2025-14008 · GHSA-g79m-r5m3-mgj5

dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery

MEDIUM 56

A flaw has been found in dayrui XunRuiCMS up to 4.7.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00446 Published 2025-12-04 No fix listed CWE-918

TI-2025-12798 CVE-2025-14007 · GHSA-3286-53cx-8fp4

dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting

MEDIUM 44

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1.

CVSS 4.0LOW 2.0 Network High privileges User interaction EPSS 0.00298 Published 2025-12-04 No fix listed CWE-79

TI-2025-12797 CVE-2025-14006 · GHSA-cc85-vp84-h58c

dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting

MEDIUM 58

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00296 Published 2025-12-04 No fix listed CWE-79

TI-2025-12796 CVE-2025-14005 · GHSA-6x55-xg5r-mj96

dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting

MEDIUM 55

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00314 Published 2025-12-04 No fix listed CWE-79

TI-2025-12795 CVE-2025-14004 · GHSA-jx46-v4qj-5grm

dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery

MEDIUM 56

A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00467 Published 2025-12-04 No fix listed CWE-918

TI-2025-37672 CVE-2025-60445 · GHSA-wpj3-4jp3-mm43

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS…

MEDIUM 60

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-10-03 No fix listed CWE-79

TI-2025-01868 CVE-2025-2131 · GHSA-m7m3-h292-52xj

dayrui XunRuiCMS Friendly Links cross site scripting

MEDIUM 55

A vulnerability was found in dayrui XunRuiCMS up to 4.6.3.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00305 Published 2025-03-09 No fix listed CWE-79

TI-2025-19199 CVE-2025-25957 · GHSA-w63g-mh88-r763

Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote…

MEDIUM 60

Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00292 Published 2025-02-20 No fix listed CWE-79

TI-2025-01011 CVE-2025-1186 · GHSA-f529-5jxm-j388

dayrui XunRuiCMS Api.php deserialization

LOW 25

A vulnerability was found in dayrui XunRuiCMS up to 4.6.4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00685 Published 2025-02-12 No fix listed CWE-20

TI-2025-01002 CVE-2025-1177 · GHSA-5xxj-pf2m-pqvc

dayrui XunRuiCMS Linkage.php import_add deserialization

MEDIUM 57

A vulnerability was found in dayrui XunRuiCMS 4.6.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00725 Published 2025-02-11 No fix listed CWE-20

TI-2024-20898 CVE-2024-31634 · GHSA-89x5-5cm6-8f6q

Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows…

LOW 28

Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \XunRuiCMS\dayrui\Fcms\Library.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00583 Published 2024-04-16 No fix listed CWE-79

TI-2024-16101 CVE-2024-24389 · GHSA-6w43-jrpg-hc48

A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to…

LOW 27

A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Column Name parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00308 Published 2024-03-07 No fix listed CWE-79

TI-2024-16100 CVE-2024-24388 · GHSA-382c-wf23-2vph

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows…

LOW 28

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2024-02-02 No fix listed CWE-79

TI-2023-27036 CVE-2023-49490 · GHSA-6hhf-qpp9-xw74

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS)…

LOW 28

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00442 Published 2023-12-11 No fix listed CWE-79

TI-2021-15891 CVE-2021-38243 · GHSA-22vx-3c5q-pcwr

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE)…

MEDIUM 52

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01578 Published 2023-09-26 No fix listed CWE-94

TI-2023-01576 CVE-2023-1680 · GHSA-g7m6-859q-xfqp

Xunrui CMS main.html information disclosure

LOW 34

A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00778 Published 2023-03-29 No fix listed CWE-200

TI-2023-01579 CVE-2023-1683 · GHSA-qchg-5f29-5gxw

Xunrui CMS system_log.html information disclosure

LOW 33

A vulnerability was found in Xunrui CMS 4.61 and classified as problematic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00497 Published 2023-03-29 No fix listed CWE-200

TI-2023-01578 CVE-2023-1682 · GHSA-8488-vjg6-99vp

Xunrui CMS Install.txt direct request

LOW 34

A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00685 Published 2023-03-28 No fix listed CWE-425

TI-2023-01577 CVE-2023-1681 · GHSA-wcf8-m98c-fm2f

Xunrui CMS test.php information disclosure

LOW 34

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00803 Published 2023-03-28 No fix listed CWE-200

TI-2022-12358 CVE-2022-30037 · GHSA-f9p9-jv2m-5p2j

XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion…

HIGH 67

XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00924 Published 2023-03-23 No fix listed CWE-829

TI-2022-16601 CVE-2022-36224 · GHSA-qvq2-h9w4-rfm2

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).

LOW 38

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0047 Published 2022-08-19 No fix listed CWE-352

TI-2019-12741 CVE-2019-17074 · GHSA-frqj-mhwc-xh4f

An issue was discovered in XunRuiCMS 4.3.1.

LOW 25

An issue was discovered in XunRuiCMS 4.3.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00611 Published 2019-10-01 No fix listed CWE-79

Vulnerabilities

Filters