Classcms Classcms vulnerabilities

• classcms ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by... CVE-2024-57099 9.8 CriticalFebruary 3, 2025
• classcms ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php. CVE-2024-57097 4.8 MediumFebruary 3, 2025
• classcms ClassCMS User Management Page admin insufficient privileges CVE-2024-12666 5.1 MediumDecember 16, 2024
• classcms ClassCMS Model Management Page admin cross site scripting CVE-2024-12503 5.1 MediumDecember 12, 2024
• classcms ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which... CVE-2024-48180 9.8 CriticalOctober 16, 2024
• classcms ClassCMS Article admin cross site scripting CVE-2024-8145 5.1 MediumAugust 25, 2024
• classcms ClassCMS Logo admin cross site scripting CVE-2024-8144 5.3 MediumAugust 25, 2024
• classcms ClassCMS cross site scripting CVE-2024-6932 5.3 MediumJuly 20, 2024
• classcms Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload.... CVE-2022-25581 Public exploit 7.8 HighMarch 18, 2022