Vulnerabilities

TI-2025-37956 CVE-2025-61194 · GHSA-r3hw-j936-62fm

daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php.

HIGH 70

daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00244 Published 2025-10-21 No fix listed CWE-89

TI-2025-37951 CVE-2025-61181 · GHSA-fgfj-9g98-6f38

daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.

MEDIUM 62

daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00252 Published 2025-10-21 No fix listed CWE-434

TI-2025-06238 CVE-2025-6865 · GHSA-5mxq-jrf7-jcwr

DaiCuo index cross-site request forgery

MEDIUM 57

A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00284 Published 2025-06-29 No fix listed CWE-352

TI-2025-03345 CVE-2025-3795 · GHSA-qhg4-2m23-3vvx

DaiCuo SEO Optimization Settings Section cross site scripting

MEDIUM 55

A vulnerability was found in DaiCuo 1.3.13.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00379 Published 2025-04-18 No fix listed CWE-79

TI-2023-26689 CVE-2023-48940 · GHSA-q9f3-c866-f5q5

A stored cross-site scripting (XSS) vulnerability in /admin.php of DaiCuo v2.5.15 allows…

LOW 25

A stored cross-site scripting (XSS) vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00388 Published 2023-12-06 No fix listed CWE-79

Vulnerabilities

Filters

daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php.

daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.

DaiCuo index cross-site request forgery

DaiCuo SEO Optimization Settings Section cross site scripting

A stored cross-site scripting (XSS) vulnerability in /admin.php of DaiCuo v2.5.15 allows…