Html-js Doracms vulnerabilities

• doramart doracms doramart DoraCMS v1.js createFileBypath path traversal CVE-2026-3795 5.3 MediumMarch 9, 2026
• doramart doracms doramart DoraCMS Email API send improper authentication CVE-2026-3794 6.9 MediumMarch 9, 2026
• html-js doracms Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to... CVE-2024-28715 Public exploit 8.8 HighMarch 19, 2024
• html-js doracms DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key. CVE-2023-51840 9.8 CriticalJanuary 29, 2024
• html-js doracms An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary... CVE-2023-49444 5.4 MediumDecember 8, 2023
• html-js doracms DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and... CVE-2023-49443 9.8 CriticalDecember 8, 2023
• html-js doracms DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP... CVE-2022-35147 9.8 CriticalAugust 17, 2022
• html-js doracms A stored cross-site scripting (XSS) vulnerability in the component /admin/contenttemp of DoraCMS... CVE-2022-25464 4.8 MediumMarch 20, 2022
• html-js doracms Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive... CVE-2020-18220 7.5 HighMay 20, 2021
• html-js doracms Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3... CVE-2018-16622 5.4 MediumSeptember 6, 2018