Xunruicms vulnerabilities

Products

• Xunruicms 23

Newest

• dayrui xunruicms dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting CVE-2025-15144 5.3 MediumDecember 28, 2025
• dayrui xunruicms dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery CVE-2025-14008 5.1 MediumDecember 4, 2025
• dayrui xunruicms dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting CVE-2025-14007 2.0 LowDecember 4, 2025
• dayrui xunruicms dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting CVE-2025-14006 5.1 MediumDecember 4, 2025
• dayrui xunruicms dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting CVE-2025-14005 4.8 MediumDecember 4, 2025
• dayrui xunruicms dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery CVE-2025-14004 5.1 MediumDecember 4, 2025
• xunruicms A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1.... CVE-2025-60445 6.1 MediumOctober 3, 2025
• dayrui xunruicms dayrui XunRuiCMS Friendly Links cross site scripting CVE-2025-2131 4.8 MediumMarch 9, 2025
• xunruicms Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to... CVE-2025-25957 6.1 MediumFebruary 20, 2025
• dayrui xunruicms dayrui XunRuiCMS Api.php deserialization CVE-2025-1186 5.3 MediumFebruary 12, 2025
• dayrui xunruicms dayrui XunRuiCMS Linkage.php import_add deserialization CVE-2025-1177 5.3 MediumFebruary 11, 2025
• xunruicms Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote... CVE-2024-31634 6.1 MediumApril 16, 2024
• xunruicms A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute... CVE-2024-24389 6.1 MediumMarch 7, 2024
• xunruicms Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote... CVE-2024-24388 6.1 MediumFebruary 2, 2024
• xunruicms XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability... CVE-2023-49490 6.1 MediumDecember 11, 2023
• xunruicms xunruicms <=4.5.1 is vulnerable to Remote Code Execution. CVE-2021-38243 9.8 CriticalSeptember 26, 2023
• statamic cms, xunruicms +1 more Xunrui CMS main.html information disclosure CVE-2023-1680 4.3 MediumMarch 29, 2023
• statamic cms, xunruicms +1 more Xunrui CMS system_log.html information disclosure CVE-2023-1683 4.3 MediumMarch 29, 2023
• statamic cms, xunruicms +1 more Xunrui CMS Install.txt direct request CVE-2023-1682 4.3 MediumMarch 28, 2023
• statamic cms, xunruicms +1 more Xunrui CMS test.php information disclosure CVE-2023-1681 4.3 MediumMarch 28, 2023
• xunruicms XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows... CVE-2022-30037 7.2 HighMarch 23, 2023
• xunruicms XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF). CVE-2022-36224 8.8 HighAugust 19, 2022
• xunruicms An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area. CVE-2019-17074 5.4 MediumOctober 1, 2019