Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

XunRuiCMS — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in XunRuiCMS, with AI-generated Chinese analysis, references, and POCs.

Vendor: dayrui

CVE ID Title CVSS Severity Published
CVE-2026-120349 dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection CWE-94 7.3 High 2026-11-02
CVE-2026-120348 dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection CWE-94 7.3 High 2026-11-02
CVE-2026-120347 dayrui XunRuiCMS Member View.php View sql injection CWE-89 7.3 High 2026-11-02
CVE-2026-101018 dayrui XunruiCMS Group Editing Home.php group_all_edit sql injection CWE-89 4.7 Medium 2026-09-28
CVE-2025-15144 dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting CWE-79 4.3 Medium 2025-12-28
CVE-2025-14008 dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery CWE-918 4.7 Medium 2025-12-04
CVE-2025-14007 dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting CWE-79 2.0 Low 2025-12-04
CVE-2025-14006 dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting CWE-79 3.5 Low 2025-12-04
CVE-2025-14005 dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting CWE-79 2.4 Low 2025-12-04
CVE-2025-14004 dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery CWE-918 4.7 Medium 2025-12-04
CVE-2025-2131 dayrui XunRuiCMS Friendly Links cross site scripting CWE-79 2.4 Low 2025-03-09
CVE-2025-1186 dayrui XunRuiCMS Api.php deserialization CWE-502 6.3 Medium 2025-02-12
CVE-2025-1177 dayrui XunRuiCMS Linkage.php import_add deserialization CWE-502 6.3 Medium 2025-02-11

All 13 known CVE vulnerabilities affecting XunRuiCMS with full Chinese analysis, references, and POCs where available.