Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

XunRuiCMS — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in XunRuiCMS, with AI-generated Chinese analysis, references, and POCs.

Vendor: dayrui

CVE IDTitleCVSSSeverityPublished
CVE-2025-15144 dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting CWE-79 4.3 Medium2025-12-28
CVE-2025-14008 dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery CWE-918 4.7 Medium2025-12-04
CVE-2025-14007 dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting CWE-79 2.0 Low2025-12-04
CVE-2025-14006 dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting CWE-79 3.5 Low2025-12-04
CVE-2025-14005 dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting CWE-79 2.4 Low2025-12-04
CVE-2025-14004 dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery CWE-918 4.7 Medium2025-12-04
CVE-2025-2131 dayrui XunRuiCMS Friendly Links cross site scripting CWE-79 2.4 Low2025-03-09
CVE-2025-1186 dayrui XunRuiCMS Api.php deserialization CWE-502 6.3 Medium2025-02-12
CVE-2025-1177 dayrui XunRuiCMS Linkage.php import_add deserialization CWE-502 6.3 Medium2025-02-11

All 9 known CVE vulnerabilities affecting XunRuiCMS with full Chinese analysis, references, and POCs where available.