CVE-2023-53925TRUNG BÌNH 6.1UliCMS 2023.1 contains a stored cross-site scripting vulnerability that allows attackers to upload malicious SVG files with embedded JavaScr…
CVE-2023-53924CAO 8.8UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .p…
CVE-2023-53923NGHIÊM TRỌNG 9.8UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through …
CVE-2023-53914NGHIÊM TRỌNG 9.8UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assig…
CVE-2020-12703TRUNG BÌNH 6.1UliCMS before 2020.2 has XSS during PackageController uninstall.