Appcms

appcms

Vendor: Appcms • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-45380 1Appcms 1Appcms Jun 17, 2026 Jan 23, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php
CVE-2020-36007 1Appcms 1Appcms Jun 17, 2026 Jun 3, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users.
CVE-2020-36006 1Appcms 1Appcms Jun 17, 2026 Jun 3, 2021 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
CVE-2020-36005 1Appcms 1Appcms Jun 17, 2026 Jun 3, 2021 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
CVE-2020-36004 1Appcms 1Appcms Jun 17, 2026 Jun 3, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information.
CVE-2019-9595 1Appcms 1Appcms Jun 17, 2026 Mar 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.