Browse CVEs

MEDIUM 6.1 CVE-2025-15144 A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function dr_show_error/dr_exit_msg of the file /dayrui/Fc… Xunruicms after 4.7.1 Fix from $1,6002025-12-28 HIGH 7.2 CVE-2025-14008 A flaw has been found in dayrui XunRuiCMS up to 4.7.1. This vulnerability affects unknown code of the file admin79f2ec220c7e.php?c=api&m=test_site_do… Xunruicms after 4.7.1 Fix from $1,9502025-12-04 MEDIUM 6.1 CVE-2025-14006 A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind4… Xunruicms after 4.7.1 Fix from $1,6002025-12-04 MEDIUM 6.1 CVE-2025-14007 A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobil… Xunruicms after 4.7.1 Fix from $1,6002025-12-04 CRITICAL 9.8 CVE-2025-14004 A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1. Affected is an unknown function of the file /admind45f74adbd95.php?c=email&m=add… Xunruicms after 4.7.1 Fix from $2,3002025-12-04 MEDIUM 6.1 CVE-2025-14005 A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. Affected by this vulnerability is an unknown functionality of the file /admind45f74ad… Xunruicms after 4.7.1 Fix from $1,6002025-12-04 MEDIUM 6.1 CVE-2025-60445 A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1. The vulnerability exists due to insufficient valida… Xunruicms No fix yet Fix from $1,6002025-10-03 MEDIUM 6.1 CVE-2025-25957 Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script. Xunruicms after 4.6.3 Fix from $1,6002025-02-20 CRITICAL 9.8 CVE-2025-1186 A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Con… Xunruicms after 4.6.4 Fix from $2,3002025-02-12 CRITICAL 9.8 CVE-2025-1177 A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function import_add of the file dayrui/Fcms/… Xunruicms No fix yet Fix from $2,3002025-02-11 MEDIUM 6.1 CVE-2024-31634 Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.ph… Xunruicms after 4.6.3 Fix from $1,6002024-04-16 MEDIUM 6.1 CVE-2024-24389 A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload … Xunruicms after 4.6.2 Fix from $1,6002024-03-07 MEDIUM 6.1 CVE-2024-24388 Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted… Xunruicms after 4.6.2 Fix from $1,6002024-02-02 MEDIUM 6.1 CVE-2023-49490 XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php. Xunruicms No fix yet Fix from $1,6002023-12-11 CRITICAL 9.8 CVE-2021-38243 xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to ex… Xunruicms after 4.5.1 Fix from $2,3002023-09-27 HIGH 7.5 CVE-2023-1680 A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayr… Xunruicms No fix yet Fix from $1,9502023-03-29 HIGH 7.5 CVE-2023-1683 A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/… Xunruicms No fix yet Fix from $1,9502023-03-29 HIGH 7.5 CVE-2023-1682 A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fi… Xunruicms No fix yet Fix from $1,9502023-03-29 HIGH 7.5 CVE-2023-1681 A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.… Xunruicms No fix yet Fix from $1,9502023-03-28 HIGH 7.2 CVE-2022-30037 XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add funct… Xunruicms after 4.5.1 Fix from $1,9502023-03-23 HIGH 8.8 CVE-2022-36224 XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF). Xunruicms No fix yet Fix from $1,9502022-08-19 MEDIUM 5.4 CVE-2019-17074 An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area. Xunruicms No fix yet Fix from $1,6002019-10-01