CVE-2021-43735緊急 9.8CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule.
CVE-2020-24993中 5.4There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the articl…
CVE-2020-24992中 5.4There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses …
CVE-2020-20296緊急 9.8An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious par…
CVE-2020-20295緊急 9.8An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parame…