← Back

Baicloud Cms Project

baicloud-cms_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Baicloud Cms
baicloud-cms
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-44302
1Baicloud Cms Project
1Baicloud Cms
Jun 17, 2026
Feb 19, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.
CVE-2021-41729
1Baicloud Cms Project
1Baicloud Cms
Jun 17, 2026
Sep 30, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.