Vulnerability index

Browse CVEs

22 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Xunruicms MEDIUM 6.1
CVE-2025-15144

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function dr_show_error/dr_exit_msg of the file /dayrui/Fc…

Fix: after 4.7.1
Fix from $1,600 2025-12-28
Xunruicms HIGH 7.2
CVE-2025-14008

A flaw has been found in dayrui XunRuiCMS up to 4.7.1. This vulnerability affects unknown code of the file admin79f2ec220c7e.php?c=api&m=test_site_do…

Fix: after 4.7.1
Fix from $1,950 2025-12-04
Xunruicms MEDIUM 6.1
CVE-2025-14006

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind4…

Fix: after 4.7.1
Fix from $1,600 2025-12-04
Xunruicms MEDIUM 6.1
CVE-2025-14007

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobil…

Fix: after 4.7.1
Fix from $1,600 2025-12-04
Xunruicms CRITICAL 9.8
CVE-2025-14004

A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1. Affected is an unknown function of the file /admind45f74adbd95.php?c=email&m=add…

Fix: after 4.7.1
Fix from $2,300 2025-12-04
Xunruicms MEDIUM 6.1
CVE-2025-14005

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. Affected by this vulnerability is an unknown functionality of the file /admind45f74ad…

Fix: after 4.7.1
Fix from $1,600 2025-12-04
Xunruicms MEDIUM 6.1
CVE-2025-60445

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1. The vulnerability exists due to insufficient valida…

No fix yet
Fix from $1,600 2025-10-03
Xunruicms MEDIUM 6.1
CVE-2025-25957

Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script.

Fix: after 4.6.3
Fix from $1,600 2025-02-20
Xunruicms CRITICAL 9.8
CVE-2025-1186

A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Con…

Fix: after 4.6.4
Fix from $2,300 2025-02-12
Xunruicms CRITICAL 9.8
CVE-2025-1177

A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function import_add of the file dayrui/Fcms/…

No fix yet
Fix from $2,300 2025-02-11
Xunruicms MEDIUM 6.1
CVE-2024-31634

Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.ph…

Fix: after 4.6.3
Fix from $1,600 2024-04-16
Xunruicms MEDIUM 6.1
CVE-2024-24389

A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload …

Fix: after 4.6.2
Fix from $1,600 2024-03-07
Xunruicms MEDIUM 6.1
CVE-2024-24388

Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted…

Fix: after 4.6.2
Fix from $1,600 2024-02-02
Xunruicms MEDIUM 6.1
CVE-2023-49490

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php.

No fix yet
Fix from $1,600 2023-12-11
Xunruicms CRITICAL 9.8
CVE-2021-38243

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to ex…

Fix: after 4.5.1
Fix from $2,300 2023-09-27
Xunruicms HIGH 7.5
CVE-2023-1680

A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayr…

No fix yet
Fix from $1,950 2023-03-29
Xunruicms HIGH 7.5
CVE-2023-1683

A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/…

No fix yet
Fix from $1,950 2023-03-29
Xunruicms HIGH 7.5
CVE-2023-1682

A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fi…

No fix yet
Fix from $1,950 2023-03-29
Xunruicms HIGH 7.5
CVE-2023-1681

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.…

No fix yet
Fix from $1,950 2023-03-28
Xunruicms HIGH 7.2
CVE-2022-30037

XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add funct…

Fix: after 4.5.1
Fix from $1,950 2023-03-23
Xunruicms HIGH 8.8
CVE-2022-36224

XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).

No fix yet
Fix from $1,950 2022-08-19
Xunruicms MEDIUM 5.4
CVE-2019-17074

An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.

No fix yet
Fix from $1,600 2019-10-01