Vulnerabilities

TI-2024-06063 CVE-2024-6539 · GHSA-57wx-64w4-pwjp

heyewei SpringBootCMS Guestbook guestbook cross site scripting

MEDIUM 57

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2024-07-07 No fix listed CWE-79

TI-2023-23126 CVE-2023-43192 · GHSA-q396-xfjm-r6q8

MEDIUM 42

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00894 Published 2023-09-27 No fix listed CWE-89

TI-2023-23125 CVE-2023-43191 · GHSA-4x5j-8hmf-vgjf

LOW 25

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00405 Published 2023-09-27 No fix listed CWE-79

TI-2022-03922 CVE-2022-4282 · GHSA-j9jm-9v86-98jx

HIGH 65

A vulnerability was found in SpringBootCMS and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00747 Published 2022-12-05 No fix listed CWE-707