Publiccms vulnerabilities

Products

• Publiccms 47

Newest

• publiccms Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal CVE-2026-3289 5.3 MediumFebruary 27, 2026
• publiccms PublicCMS v5.202506.d and earlier is vulnerable to stored XSS. Uploaded PDFs can contain... CVE-2025-69437 8.7 HighFebruary 27, 2026
• publiccms Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization CVE-2026-2010 2.3 LowFebruary 6, 2026
• publiccms Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization CVE-2026-1112 5.3 MediumJanuary 18, 2026
• publiccms Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal CVE-2026-1111 Public exploit 5.1 MediumJanuary 18, 2026
• publiccms PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module. CVE-2025-65837 5.4 MediumDecember 22, 2025
• publiccms PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the... CVE-2025-65840 8.8 HighDecember 1, 2025
• publiccms PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. CVE-2025-65838 7.5 HighDecember 1, 2025
• publiccms PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController. CVE-2025-65836 9.1 CriticalDecember 1, 2025
• publiccms OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b... CVE-2025-57516 8.2 HighSeptember 29, 2025
• publiccms Sanluan PublicCMS viewer.html redirect CVE-2025-7953 5.1 MediumJuly 22, 2025
• publiccms Sanluan PublicCMS preview.html redirect CVE-2025-7949 5.1 MediumJuly 22, 2025
• publiccms An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of... CVE-2025-25361 9.8 CriticalMarch 6, 2025
• public cms, publiccms +1 more Public CMS Voting Management save cross site scripting CVE-2024-11175 5.3 MediumNovember 13, 2024
• publiccms Sanluan PublicCMS Tag Type save cross site scripting CVE-2024-11070 5.3 MediumNovember 11, 2024
• publiccms PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via... CVE-2024-46410 4.8 MediumOctober 8, 2024
• publiccms publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin... CVE-2024-42523 7.2 HighAugust 23, 2024
• publiccms PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability... CVE-2024-40552 8.8 HighJuly 12, 2024
• publiccms An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS... CVE-2024-40551 8.8 HighJuly 12, 2024
• publiccms An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of... CVE-2024-40550 8.8 HighJuly 12, 2024
• publiccms An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS... CVE-2024-40549 8.8 HighJuly 12, 2024
• publiccms An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0... CVE-2024-40548 8.8 HighJuly 12, 2024
• publiccms PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement... CVE-2024-40547 6.5 MediumJuly 12, 2024
• publiccms An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0... CVE-2024-40546 8.8 HighJuly 12, 2024
• publiccms An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS... CVE-2024-40545 8.8 HighJuly 12, 2024
• publiccms PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the... CVE-2024-40544 8.8 HighJuly 12, 2024
• publiccms PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the... CVE-2024-40543 8.8 HighJuly 12, 2024
• publiccms An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the... CVE-2024-31759 8.8 HighApril 16, 2024
• tianjin publicms, publiccms +1 more Tianjin PubliCMS cross-site request forgery CVE-2024-2911 6.9 MediumMarch 26, 2024
• publiccms PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and... CVE-2023-51252 5.4 MediumJanuary 10, 2024
• publiccms Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute... CVE-2023-46990 9.8 CriticalNovember 20, 2023
• publiccms An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via... CVE-2023-48204 6.5 MediumNovember 15, 2023
• publiccms PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions. CVE-2023-34852 Public exploit 9.8 CriticalJune 15, 2023
• publiccms SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute... CVE-2020-20915 9.8 CriticalApril 4, 2023
• publiccms SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute... CVE-2020-20914 9.8 CriticalApril 4, 2023
• publiccms sanluan PublicCMS Tab dwz.min.js initLink cross site scripting CVE-2022-3950 3.5 LowNovember 11, 2022
• publiccms Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms... CVE-2021-27693 9.8 CriticalSeptember 2, 2022
• publiccms PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive... CVE-2022-29784 5.3 MediumJune 3, 2022
• publiccms PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the... CVE-2022-23389 EPSS 22.0% 9.8 CriticalFebruary 14, 2022
• publiccms An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code. CVE-2021-40881 9.8 CriticalSeptember 15, 2021
• publiccms Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the... CVE-2020-21333 5.4 MediumJuly 9, 2021
• publiccms An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the page_list "attached"... CVE-2018-18927 4.8 MediumNovember 4, 2018
• publiccms An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response... CVE-2018-17368 5.3 MediumSeptember 23, 2018
• publiccms A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a... CVE-2018-12914 9.8 CriticalJune 27, 2018
• publiccms An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and ... CVE-2018-12494 6.5 MediumJune 15, 2018
• publiccms An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and ... CVE-2018-12493 6.5 MediumJune 15, 2018
• publiccms An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin... CVE-2018-11500 8.8 HighMay 26, 2018