Vulnerabilities (CVE)

Filtered by vendor Xunruicms Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-30037 1 Xunruicms 1 Xunruicms 2026-06-17 N/A 7.2 HIGH
XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.
CVE-2021-38243 1 Xunruicms 1 Xunruicms 2026-06-17 N/A 9.8 CRITICAL
xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request.
CVE-2019-17074 1 Xunruicms 1 Xunruicms 2026-06-17 3.5 LOW 5.4 MEDIUM
An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.