Sanluan Publiccms vulnerabilities

• sanluan publiccms Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization CVE-2026-121583 5.3 MediumNovember 3, 2026
• sanluan publiccms Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization CVE-2026-120319 5.3 MediumNovember 2, 2026
• sanluan publiccms PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint CVE-2026-110113 5.3 MediumOctober 13, 2026
• sanluan publiccms PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect CVE-2026-109160 5.3 MediumOctober 13, 2026
• sanluan publiccms Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization CVE-2026-97721 5.1 MediumSeptember 25, 2026
• sanluan publiccms Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine CVE-2026-8740 5.3 MediumMay 17, 2026
• sanluan publiccms Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key CVE-2026-8739 6.9 MediumMay 17, 2026
• sanluan publiccms Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error CVE-2026-8738 6.9 MediumMay 17, 2026
• sanluan publiccms Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication CVE-2026-8737 6.9 MediumMay 17, 2026
• sanluan publiccms Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption CVE-2026-6797 5.3 MediumApril 21, 2026
• sanluan publiccms Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file CVE-2026-6796 5.3 MediumApril 21, 2026
• sanluan publiccms Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine CVE-2026-5987 5.1 MediumApril 9, 2026
• publiccms Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal CVE-2026-3289 5.3 MediumFebruary 27, 2026
• publiccms Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization CVE-2026-2010 2.3 LowFebruary 6, 2026
• publiccms Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization CVE-2026-1112 5.3 MediumJanuary 18, 2026
• publiccms Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal CVE-2026-1111 Public exploit 5.1 MediumJanuary 18, 2026
• publiccms Sanluan PublicCMS viewer.html redirect CVE-2025-7953 5.1 MediumJuly 22, 2025
• publiccms Sanluan PublicCMS preview.html redirect CVE-2025-7949 5.1 MediumJuly 22, 2025
• publiccms Sanluan PublicCMS Tag Type save cross site scripting CVE-2024-11070 5.3 MediumNovember 11, 2024
• publiccms sanluan PublicCMS Tab dwz.min.js initLink cross site scripting CVE-2022-3950 3.5 LowNovember 11, 2022