VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403,446 vulnerabilities · 1,767 actively exploited (CISA KEV)

yunucms ✕Clear filters

15 results

ID	Severity	Summary	Published
CVE-2020-18446	中危4.8	Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.	12/08/2021
CVE-2020-18445	中危6.1	Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.	12/08/2021
CVE-2019-5311	中危6.1	An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter.	04/01/2019
CVE-2019-5310	中危6.1	YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.