Skip to content
Wangl1989 Mysiteforme vulnerabilities
-
wangl1989 mysiteforme
A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
CVE-2025-26136
9.8 Critical
-
wangl1989 mysiteforme
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the...
CVE-2024-57767
8.6 High
-
wangl1989 mysiteforme
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the...
CVE-2024-57766
9.1 Critical
-
wangl1989 mysiteforme
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name...
CVE-2024-57765
7.5 High
-
wangl1989 mysiteforme
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the...
CVE-2024-57764
9.1 Critical
-
wangl1989 mysiteforme
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the...
CVE-2024-57763
9.1 Critical
-
wangl1989 mysiteforme
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml...
CVE-2024-57762
7.5 High
-
wangl1989 mysiteforme
wangl1989 mysiteforme FileController doContent server-side request forgery
CVE-2024-13139
5.3 Medium
-
wangl1989 mysiteforme
wangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted upload
CVE-2024-13138
5.1 Medium
-
wangl1989 mysiteforme
wangl1989 mysiteforme SiteController RestResponse cross site scripting
CVE-2024-13137
5.1 Medium
-
wangl1989 mysiteforme
wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserialization
CVE-2024-13136
5.3 Medium
-
wangl1989 mysiteforme
mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.
CVE-2022-29309
7.5 High
-
wangl1989 mysiteforme
mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag...
CVE-2021-46026
5.4 Medium
-
wangl1989 mysiteforme
mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The...
CVE-2021-46027
6.5 Medium