Skip to content

Wtcms Project Wtcms vulnerabilities

taosir wtcmstaosir WTCMS index.php fetch code injectionCVE-2025-137866.9 MediumNovember 30, 2025
taosir wtcmstaosir WTCMS CommentadminController CommentadminController.class.php delete sql injectionCVE-2025-137835.3 MediumNovember 30, 2025
taosir wtcmstaosir WTCMS SlideController SlideController.class.php delete sql injectionCVE-2025-137826.9 MediumNovember 30, 2025
wtcms project wtcmsAn issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the...CVE-2024-482394.8 MediumOctober 25, 2024
wtcms project wtcmsWTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl...CVE-2024-482384.7 MediumOctober 25, 2024
wtcms project wtcmsWTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController...CVE-2024-482379.8 CriticalOctober 25, 2024
wtcms project wtcmsWTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field...CVE-2020-203495.4 MediumSeptember 1, 2021
wtcms project wtcmsWTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the...CVE-2020-203485.4 MediumSeptember 1, 2021
wtcms project wtcmsWTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field under...CVE-2020-203475.4 MediumSeptember 1, 2021
wtcms project wtcmsWTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management...CVE-2020-203455.4 MediumSeptember 1, 2021
wtcms project wtcmsWTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search...CVE-2020-203445.4 MediumSeptember 1, 2021
wtcms project wtcmsWTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m...CVE-2020-203436.5 MediumSeptember 1, 2021
wtcms project wtcmsWTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS.CVE-2019-167196.5 MediumSeptember 23, 2019
wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website...CVE-2019-89116.1 MediumFebruary 18, 2019
wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.CVE-2019-89108.8 HighFebruary 18, 2019
wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service ...CVE-2019-89097.5 HighFebruary 18, 2019
wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by...CVE-2019-89089.8 CriticalFebruary 18, 2019
wtcms project wtcmsWTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user...CVE-2018-102678.8 HighApril 21, 2018