Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CMS — Vulnerabilities & Security Advisories 315

All 315 CVE vulnerabilities found in CMS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting Content Management Systems. It collects recorded flaws across multiple CMS vendors, spanning advisories published over the last five years. Readers can track vendor-specific security updates, analyze common weakness classes such as SQL injection and cross-site scripting, and review the historical vulnerability trends for any given product. The data is organized by vendor and weakness type, enabling detailed comparison and trend analysis. No specific CVE identifiers are listed in this overview; the focus remains on patterns, frequencies, and remediation guidance. This resource supports security teams, developers, and IT managers who need to prioritize patches and assess risk exposure across their managed platforms.

Vendor: Mambo

CVE ID Title CVSS Severity Published
CVE-2024-7657 Gila CMS HTTP POST Request page cross site scripting CWE-79 3.5 Low 2024-08-11
CVE-2024-7551 juzaweb CMS Theme Editor default path traversal CWE-22 2.7 Low 2024-08-06
CVE-2024-7300 Bolt CMS Showcase Creation showcases cross site scripting CWE-79 3.5 Low 2024-07-31
CVE-2024-7299 Bolt CMS Entry Preview page cross site scripting CWE-79 3.5 Low 2024-07-31
CVE-2024-7106 Spina CMS media_folders cross-site request forgery CWE-352 4.3 Medium 2024-07-25
CVE-2024-41800 Craft CMS Allows TOTP Token To Stay Valid After Use CWE-287 4.8 Medium 2024-07-25
CVE-2024-7065 Spina CMS cross-site request forgery CWE-352 4.3 Medium 2024-07-24
CVE-2024-6947 Flute CMS Notification ContentParser.php replaceContent code injection CWE-94 4.7 Medium 2024-07-21
CVE-2024-6946 Flute CMS list code injection CWE-94 4.7 Medium 2024-07-21
CVE-2024-6945 Flute CMS Avatar Upload Page ImagesController.php unrestricted upload CWE-434 6.3 Medium 2024-07-21
CVE-2024-36119 Password confirmation stored in plain text via registration form in statamic/cms CWE-312 1.8 Low 2024-05-30
CVE-2024-3311 Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal CWE-22 6.3 Medium 2024-04-04
CVE-2024-3118 Dreamer CMS Attachment permission CWE-275 6.3 Medium 2024-03-31
CVE-2024-2354 Dreamer CMS toEdit cross-site request forgery CWE-352 4.3 Medium 2024-03-10
CVE-2024-24570 Statamic account takeover via XSS and password reset link CWE-79 8.2 High 2024-02-01
CVE-2024-0729 ForU CMS cms_admin.php sql injection CWE-89 5.5 Medium 2024-01-19
CVE-2024-0728 ForU CMS channel.php file inclusion CWE-73 4.7 Medium 2024-01-19
CVE-2024-0648 Yunyou CMS Common.php unrestricted upload CWE-434 7.3 High 2024-01-17
CVE-2024-0426 ForU CMS cms_template.php sql injection CWE-89 6.3 Medium 2024-01-11
CVE-2024-0425 ForU CMS password recovery CWE-640 5.3 Medium 2024-01-11
CVE-2024-21622 Craft CMS Privilege Escalation CWE-269 5.4 Medium 2024-01-03
CVE-2023-7091 Dreamer CMS uploadFile unrestricted upload CWE-434 6.3 Medium 2023-12-24
CVE-2023-48701 Statamic CMS vulnerable to Cross-site Scripting via uploaded assets CWE-79 7.5 High 2023-11-21
CVE-2023-48217 Remote code execution via form uploads in statamic/cms CWE-94 8.8 High 2023-11-14
CVE-2023-47129 Statamic CMS remote code execution via front-end form uploads CWE-434 8.4 High 2023-11-10
CVE-2023-5812 flusity CMS upload.php handleFileUpload unrestricted upload CWE-434 4.7 Medium 2023-10-27
CVE-2023-5811 flusity CMS posts.php loadPostAddForm cross site scripting CWE-79 2.4 Low 2023-10-27
CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting CWE-79 2.4 Low 2023-10-27
CVE-2023-5793 flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting CWE-79 3.5 Low 2023-10-26
CVE-2023-5259 ForU CMS cms_admin.php denial of service CWE-404 2.7 Low 2023-09-29

All 315 known CVE vulnerabilities affecting CMS with full Chinese analysis, references, and POCs where available.