CVEs (23)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php. |
XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF). |
An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area. |