TI-2024-37799 CVE-2024-57099 · GHSA-5rhr-255q-cgmp
ClassCMS v4.8 has a code execution vulnerability.
Priority HIGH 82
ClassCMS v4.8 has a code execution vulnerability.
Vulnerabilities
8 records
TI-2024-37797 CVE-2024-57097 · GHSA-8376-mfc5-9vv2
ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.
Priority MEDIUM 55
ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.
TI-2024-11751 CVE-2024-12666 · GHSA-v29m-m46x-46c5
ClassCMS User Management Page admin insufficient privileges
Priority MEDIUM 56
A vulnerability has been found in ClassCMS up to 4.8 and classified as critical.
TI-2024-11602 CVE-2024-12503 · GHSA-p964-4w2r-7927
ClassCMS Model Management Page admin cross site scripting
Priority MEDIUM 56
A vulnerability classified as problematic was found in ClassCMS 4.8.
TI-2024-32294 CVE-2024-48180 · GHSA-3p3h-5g54-qmc8
ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method…
Priority MEDIUM 50
ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.
TI-2024-07552 CVE-2024-8145 · GHSA-3hfc-7w8c-chcm
ClassCMS Article admin cross site scripting
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8.
TI-2024-07551 CVE-2024-8144 · GHSA-4gmx-cpwm-vfgx
ClassCMS Logo admin cross site scripting
Priority MEDIUM 57
A vulnerability classified as problematic was found in ClassCMS 4.8.
TI-2022-09178 CVE-2022-25581 · GHSA-83jr-29h8-jh58
Classcms v2.5 and below contains an arbitrary file upload via the component…
Priority LOW 36
Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload.