CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 09/09/2025 |
| CVE-2025-45474 | 高危7.3 | maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings. | 29/05/2025 |
| CVE-2025-45475 | 中危5.4 | maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management. | 27/05/2025 |
| CVE-2025-28091 | 严重9.1 | maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article. | 28/03/2025 |
| CVE-2025-28090 | 严重9.1 | maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature. | 28/03/2025 |
| CVE-2025-28089 | 严重9.1 | maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function. | 28/03/2025 |
| CVE-2024-46654 | 中危4.8 | A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | 20/09/2024 |
| CVE-2024-32391 | 高危7.3 | Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload. | 19/04/2024 |
| CVE-2022-47872 | 高危8.8 | A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module. | 01/02/2023 |
| CVE-2022-44870 | 中危6.1 | A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module. | 06/01/2023 |
| CVE-2022-35148 | 中危6.5 | maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html. | 17/08/2022 |
| CVE-2022-31303 | 中危5.4 | maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field. | 21/06/2022 |
| CVE-2022-31302 | 中危5.4 | maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field. | 21/06/2022 |
| CVE-2021-43707 | 中危6.1 | Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter. | 31/03/2022 |
| CVE-2022-27887 | 中危6.1 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter. | 25/03/2022 |
| CVE-2022-27886 | 中危6.1 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index.html via the wd parameter. | 25/03/2022 |
| CVE-2022-27885 | 中危6.1 | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters. | 25/03/2022 |
| CVE-2022-27884 | 中危6.1 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index.html via the wd parameter. | 25/03/2022 |