CVE-2026-120347

The dayrui XunRuiCMS software, specifically versions up to 4.7.4 , contains a SQL injection vulnerability in the Member Module . The flaw exists within the View function of the file dayrui/Fcms/Core/View.php, where a manipulation of the catid argument allows for remote exploitation. The impact in...