Browse CVEs

CRITICAL 9.8 CVE-2023-53923 UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through the UserC… Ulicms Mitigation only Fix from $2,3002025-12-17 HIGH 8.8 CVE-2023-53924 UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar exten… Ulicms No fix yet Fix from $1,9502025-12-17 MEDIUM 6.1 CVE-2023-53925 UliCMS 2023.1 contains a stored cross-site scripting vulnerability that allows attackers to upload malicious SVG files with embedded JavaScript. Atta… Ulicms No fix yet Fix from $1,6002025-12-17 CRITICAL 9.8 CVE-2023-53914 UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assignment in … Ulicms Mitigation only Fix from $2,3002025-12-17 MEDIUM 6.1 CVE-2020-12703 UliCMS before 2020.2 has XSS during PackageController uninstall. Ulicms 2020.2+ Fix from $1,6002020-05-07 MEDIUM 6.1 CVE-2020-12704 UliCMS before 2020.2 has PageController stored XSS. Ulicms 2020.2+ Fix from $1,6002020-05-07 MEDIUM 6.1 CVE-2019-11398 Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the… Ulicms No fix yet Fix from $1,6002019-05-08