CVE-2025-59117中 4.8Windu CMS is vulnerable to multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the page editing endpoint windu/admin/content/pages…
CVE-2025-59116中 5.3Windu CMS is vulnerable to User Enumeration. This issue occurs during logon, where a difference in messages could allow an attacker to deter…
CVE-2025-59115中 5.4Windu CMS is vulnerable to Stored Cross-Site Scripting (XSS) in the logon page where input data has no proper validation. Malicious attacker…
CVE-2025-59114中 6.5Windu CMS is vulnerable to Cross-Site Request Forgery in file uploading functionality. Malicious attacker can craft special website, which w…
CVE-2025-59113高 7.5Windu CMS implements weak client-side brute-force protection by using parameter loginError. Information about attempt count or timeout is no…