| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2022-4377 | S-CMS Contact Information Page cross site scripting | unspecified | S-CMS | Low | 3.5 | 2022-12-09 00:00:00 | Deep Dive |
| CVE-2022-4353 | LinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting | LinZhaoguan | pb-cms | Low | 3.5 | 2022-12-08 00:00:00 | Deep Dive |
| CVE-2022-4354 | LinZhaoguan pb-cms Message Board comment cross site scripting | LinZhaoguan | pb-cms | Medium | 4.3 | 2022-12-08 00:00:00 | Deep Dive |
| CVE-2022-42458 | Shift Tech bingo!CMS 授权问题漏洞 | Shift Tech Inc. | bingo!CMS | 超危 | - | 2022-12-07 00:00:00 | Deep Dive |
| CVE-2022-4231 | Tribal Systems Zenario CMS Remember Me session fixiation | Tribal Systems | Zenario CMS | Medium | 4.2 | 2022-11-30 00:00:00 | Deep Dive |
| CVE-2022-38974 | WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability | OnTheGoSystems Ltd. | WPML Multilingual CMS (WordPress plugin) | Medium | 4.3 | 2022-11-18 18:13:33 | Deep Dive |
| CVE-2022-38461 | WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability | OnTheGoSystems Ltd. | WPML Multilingual CMS (WordPress plugin) | Medium | 5.4 | 2022-11-17 21:59:47 | Deep Dive |
| CVE-2022-45071 | WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability | OnTheGoSystems Ltd. | WPML Multilingual CMS (WordPress plugin) | Medium | 5.4 | 2022-11-17 21:58:31 | Deep Dive |
| CVE-2022-45072 | WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability | OnTheGoSystems Ltd. | WPML Multilingual CMS (WordPress plugin) | Medium | 4.3 | 2022-11-17 21:57:12 | Deep Dive |
| CVE-2022-4006 | WBCE CMS Header class.login.php increase_attempts excessive authentication | WBCE | CMS | Low | 3.7 | 2022-11-15 00:00:00 | Deep Dive |
| CVE-2022-3975 | NukeViet CMS Data URL Request.php filterAttr cross site scripting | NukeViet | CMS | Low | 3.5 | 2022-11-13 00:00:00 | Deep Dive |
| CVE-2022-3943 | ForU CMS cms_chip.php cross site scripting | ForU | CMS | Low | 3.5 | 2022-11-11 00:00:00 | Deep Dive |
| CVE-2022-27914 | [20221101] - Core - RXSS through reflection of user input in com_media | Joomla! Project | Joomla! CMS | 中危 | - | 2022-11-08 18:50:11 | Deep Dive |
| CVE-2020-36608 | Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting | Tribal Systems | Zenario CMS | Low | 3.5 | 2022-11-02 00:00:00 | Deep Dive |
| CVE-2022-43670 | XSS in Sling CMS Reference App Taxonomy Path | Apache Software Foundation | Apache Sling App CMS | 中危 | - | 2022-11-02 00:00:00 | Deep Dive |
| CVE-2022-3770 | Yunjing CMS upload_img.html unrestricted upload | Yunjing | CMS | Medium | 6.3 | 2022-10-31 00:00:00 | Deep Dive |
| CVE-2022-3771 | easyii CMS File Upload Management Upload.php file unrestricted upload | easyii | CMS | Medium | 6.3 | 2022-10-31 00:00:00 | Deep Dive |
| CVE-2022-27913 | [20221002] - Core - RXSS through reflection of user input in headings | Joomla! Project | Joomla! CMS | 中危 | - | 2022-10-25 19:00:16 | Deep Dive |
| CVE-2022-27912 | [20221001] - Core - Debug Mode leaks full request payloads including passwords | Joomla! Project | Joomla! CMS | 中危 | - | 2022-10-25 19:00:15 | Deep Dive |
| CVE-2022-23770 | WISA Smart Wing CMS Remote Command Execution Vulnerability | WISA corp. | Smart Wing CMS | High | 8.8 | 2022-10-17 00:00:00 | Deep Dive |