Wtcms Project vulnerabilities

Products

• Wtcms 18

Newest

• taosir wtcms taosir WTCMS index.php fetch code injection CVE-2025-13786 6.9 MediumNovember 30, 2025
• taosir wtcms taosir WTCMS CommentadminController CommentadminController.class.php delete sql injection CVE-2025-13783 5.3 MediumNovember 30, 2025
• taosir wtcms taosir WTCMS SlideController SlideController.class.php delete sql injection CVE-2025-13782 6.9 MediumNovember 30, 2025
• wtcms project wtcms An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the... CVE-2024-48239 4.8 MediumOctober 25, 2024
• wtcms project wtcms WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl... CVE-2024-48238 4.7 MediumOctober 25, 2024
• wtcms project wtcms WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController... CVE-2024-48237 9.8 CriticalOctober 25, 2024
• wtcms project wtcms WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field... CVE-2020-20349 5.4 MediumSeptember 1, 2021
• wtcms project wtcms WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the... CVE-2020-20348 5.4 MediumSeptember 1, 2021
• wtcms project wtcms WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field under... CVE-2020-20347 5.4 MediumSeptember 1, 2021
• wtcms project wtcms WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management... CVE-2020-20345 5.4 MediumSeptember 1, 2021
• wtcms project wtcms WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search... CVE-2020-20344 5.4 MediumSeptember 1, 2021
• wtcms project wtcms WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m... CVE-2020-20343 6.5 MediumSeptember 1, 2021
• wtcms project wtcms WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS. CVE-2019-16719 6.5 MediumSeptember 23, 2019
• wtcms project wtcms An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website... CVE-2019-8911 6.1 MediumFebruary 18, 2019
• wtcms project wtcms An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF. CVE-2019-8910 8.8 HighFebruary 18, 2019
• wtcms project wtcms An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service ... CVE-2019-8909 7.5 HighFebruary 18, 2019
• wtcms project wtcms An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by... CVE-2019-8908 9.8 CriticalFebruary 18, 2019
• wtcms project wtcms WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user... CVE-2018-10267 8.8 HighApril 21, 2018