Browse CVEs

HIGH 8.8 CVE-2022-50936 WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious droplets through the a… Wbce Cms No fix yet Fix from $1,9502026-01-13 MEDIUM 5.4 CVE-2023-53909 WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by uploading c… Wbce Cms No fix yet Fix from $1,6002025-12-17 MEDIUM 5.4 CVE-2023-53910 WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by inserting s… Wbce Cms No fix yet Fix from $1,6002025-12-17 MEDIUM 6.1 CVE-2023-53901 WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attac… Wbce Cms No fix yet Fix from $1,6002025-12-16 HIGH 8.8 CVE-2024-58283 WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the E… Wbce Cms No fix yet Fix from $1,9502025-12-10 CRITICAL 9.8 CVE-2023-39796EPSS 6% SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RE… Wbce Cms Mitigation only Fix from $2,3002023-11-10 MEDIUM 5.4 CVE-2023-43871 A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS). Wbce Cms No fix yet Fix from $1,6002023-09-28 HIGH 7.2 CVE-2023-38947 An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a cr… Wbce Cms No fix yet Fix from $1,9502023-08-03 HIGH 7.2 CVE-2023-29855 WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php. Wbce Cms No fix yet Fix from $1,9502023-04-18 CRITICAL 9.8 CVE-2022-46020EPSS 39% WBCE CMS v1.5.4 can implement getshell by modifying the upload file type. Wbce Cms No fix yet Fix from $2,3002022-12-20 HIGH 7.2 CVE-2022-45039 An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary code via a crafted PHP … Wbce Cms No fix yet Fix from $1,9502022-11-25 MEDIUM 5.4 CVE-2022-45040 A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or … Wbce Cms No fix yet Fix from $1,6002022-11-25 MEDIUM 5.4 CVE-2022-45036 A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML… Wbce Cms No fix yet Fix from $1,6002022-11-25 MEDIUM 5.4 CVE-2022-45037 A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via… Wbce Cms No fix yet Fix from $1,6002022-11-25 MEDIUM 5.4 CVE-2022-45038 A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML v… Wbce Cms No fix yet Fix from $1,6002022-11-25 MEDIUM 5.4 CVE-2022-30072 WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters. Wbce Cms No fix yet Fix from $1,6002022-05-17 MEDIUM 5.4 CVE-2022-30073 WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php. Wbce Cms No fix yet Fix from $1,6002022-05-17 MEDIUM 6.1 CVE-2022-28477 WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS). Wbce Cms No fix yet Fix from $1,6002022-04-28 HIGH 7.8 CVE-2022-25099 A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file. Wbce Cms No fix yet Fix from $1,9502022-02-24 HIGH 7.8 CVE-2022-25101 A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file. Wbce Cms No fix yet Fix from $1,9502022-02-24