Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CMS — Vulnerabilities & Security Advisories 321

All 321 CVE vulnerabilities found in CMS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting Content Management Systems. It collects recorded flaws across multiple CMS vendors, spanning advisories published over the last five years. Readers can track vendor-specific security updates, analyze common weakness classes such as SQL injection and cross-site scripting, and review the historical vulnerability trends for any given product. The data is organized by vendor and weakness type, enabling detailed comparison and trend analysis. No specific CVE identifiers are listed in this overview; the focus remains on patterns, frequencies, and remediation guidance. This resource supports security teams, developers, and IT managers who need to prioritize patches and assess risk exposure across their managed platforms.

Vendor: Mambo

CVE ID Title CVSS Severity Published
CVE-2025-68454 Craft CMS vulnerable to potential authenticated Remote Code Execution via Twig SSTI CWE-1336 7.2 - 2026-01-05
CVE-2025-68437 Craft CMS vulnerable to Server-Side Request Forgery (SSRF) via GraphQL Asset Upload Mutation CWE-918 9.1 - 2026-01-05
CVE-2025-68436 Craft CMS vulnerable to potential information disclosure via unchecked asset relocation CWE-200 6.5 - 2026-01-05
CVE-2025-64112 Statmatic vulnerable to Stored Cross-Site Scripting CWE-79 8.0 High 2025-10-30
CVE-2025-12347 MaxSite CMS save-file-ajax.php unrestricted upload CWE-434 6.3 Medium 2025-10-28
CVE-2025-12346 MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload CWE-434 6.3 Medium 2025-10-28
CVE-2025-12331 Willow CMS add unrestricted upload CWE-434 4.7 Medium 2025-10-27
CVE-2025-12330 Willow CMS Add Post add cross site scripting CWE-79 2.4 Low 2025-10-27
CVE-2025-11941 e107 CMS Avatar image.php path traversal CWE-22 5.4 Medium 2025-10-19
CVE-2025-11136 YiFang CMS Backend File.php webUploader unrestricted upload CWE-434 4.7 Medium 2025-09-29
CVE-2025-11019 Total.js CMS Files Menu cross site scripting CWE-79 2.4 Low 2025-09-26
CVE-2025-10940 Total.js CMS Layout admin layouts_save cross site scripting CWE-79 2.4 Low 2025-09-25
CVE-2025-57811 Craft Potential Remote Code Execution via Twig SSTI CWE-1336 9.8AI Critical AI 2025-08-25
CVE-2025-9400 YiFang CMS P_file.php mergeMultipartUpload unrestricted upload CWE-434 6.3 Medium 2025-08-25
CVE-2025-9399 YiFang CMS L_tool.php sql injection CWE-89 6.3 Medium 2025-08-25
CVE-2025-9398 YiFang CMS Migrate.php exportInstallTable information disclosure CWE-200 5.3 Medium 2025-08-24
CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE CWE-434 9.8AI Critical AI 2025-08-13
CVE-2025-54417 Craft contains a theoretical bypass for CVE-2025-23209 CWE-94 6.6 - 2025-08-09
CVE-2025-8265 299Ko CMS File Management view unrestricted upload CWE-434 4.7 Medium 2025-07-28
CVE-2025-34100 BuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload CWE-434 9.8AI Critical AI 2025-07-10
CVE-2025-34086 Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename CWE-94 7.5 High 2025-07-03
CVE-2025-34076 Microweber CMS Authenticated Local File Inclusion via Backup API CWE-22 6.1 Medium 2025-07-02
CVE-2025-6736 juzaweb CMS Add New Themes Page install improper authorization CWE-285 6.3 Medium 2025-06-26
CVE-2025-6735 juzaweb CMS Import Page imports improper authorization CWE-285 6.3 Medium 2025-06-26
CVE-2025-5435 Marwal Infotech CMS page.php sql injection CWE-89 7.3 High 2025-06-02
CVE-2025-5434 Aem Solutions CMS page.php sql injection CWE-89 7.3 High 2025-06-02
CVE-2025-5432 AssamLook CMS view_tender.php sql injection CWE-89 6.3 Medium 2025-06-02
CVE-2025-5431 AssamLook CMS department-profile.php sql injection CWE-89 6.3 Medium 2025-06-02
CVE-2025-5430 AssamLook CMS product.php sql injection CWE-89 6.3 Medium 2025-06-02
CVE-2025-5429 juzaweb CMS Plugins Page install access control CWE-284 6.3 Medium 2025-06-02

All 321 known CVE vulnerabilities affecting CMS with full Chinese analysis, references, and POCs where available.