Cmseasy vulnerabilities

Products

• Cmseasy 23

Newest

• cmseasy CmsEasy Backend Template Management template_admin.php savetemp_action code injection CVE-2025-15148 5.1 MediumDecember 28, 2025
• cmseasy CmsEasy URL view.php cross site scripting CVE-2025-11332 5.1 MediumOctober 6, 2025
• cmseasy CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php. CVE-2025-55910 6.3 MediumSeptember 19, 2025
• cmseasy CmsEasy image_admin.php deleteimg_action path traversal CVE-2025-1336 5.3 MediumFebruary 16, 2025
• cmseasy CmsEasy file_admin.php deleteimg_action path traversal CVE-2025-1335 5.3 MediumFebruary 16, 2025
• cmseasy CmsEasy database_admin.php restore_action path traversal CVE-2025-1106 5.3 MediumFebruary 7, 2025
• cmseasy CmsEasy index.php backAll_action path traversal CVE-2025-0973 5.3 MediumFebruary 3, 2025
• cmseasy CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the... CVE-2024-34315 7.5 HighMay 7, 2024
• cmseasy CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the... CVE-2024-34314 4.9 MediumMay 7, 2024
• cmseasy Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105... CVE-2024-31551 7.5 HighApril 26, 2024
• cmseasy An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via... CVE-2024-32236 3.5 LowApril 25, 2024
• cmseasy CMSeasy 7.7.7.9 is vulnerable to code execution. CVE-2024-32163 6.4 MediumApril 17, 2024
• cmseasy CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. CVE-2024-32162 4.3 MediumApril 17, 2024
• cmseasy cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php. CVE-2024-25828 4.9 MediumFebruary 22, 2024
• cmseasy CmsEasy language_admin.php getslide_child_action sql injection CVE-2024-0523 6.3 MediumJanuary 14, 2024
• cmseasy An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text... CVE-2020-18406 7.5 HighJune 27, 2023
• cmseasy cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the... CVE-2023-34880 9.8 CriticalJune 15, 2023
• cmseasy cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the... CVE-2021-42644 6.5 MediumMay 17, 2022
• cmseasy cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this... CVE-2021-42643 8.8 HighMay 17, 2022
• cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter. CVE-2019-8434 6.1 MediumFebruary 18, 2019
• cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter. CVE-2019-8432 6.1 MediumFebruary 18, 2019
• cmseasy An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text... CVE-2018-11680 6.5 MediumJune 2, 2018
• cmseasy An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an... CVE-2018-11679 8.8 HighJune 2, 2018