PT-2025-52683

Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b has a Cross Site Scripting XSS issue in the Content Search module. The issue allows for the injection of malicious scripts through the Content Search functionality. The...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

CVE-2025-65836

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

EUVD-2025-200083

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

EUVD-2025-200088

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

EUVD-2025-200089

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

CVE-2025-65836

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

CVE-2025-65836

PublicCMS V5.202506.b is vulnerable to Server-Side Request Forgery (SSRF) via the SimpleAiAdminController chat interface. Root cause details are not provided beyond the SSRF label in the chat interface. Impact is described in sources as SSRF with high severity, but no explicit exploit path or aff...

PT-2025-48547

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which stems from a path traversal in the doUploadSitefile method...

CVE-2025-65836

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

PT-2025-48548

Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b is susceptible to a Cross Site Request Forgery CSRF issue within the CkEditorAdminController. This allows an attacker to potentially perform actions on behalf of an...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which originates from a cross-site request forgery in CkEditorAdminController...

CVE-2025-65840

PublicCMS V5.202506.b is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the CkEditorAdminController. The CVE-2025-65840 entry reports a HIGH-severity issue (CVSS 3.1: 8.8) that could enable an attacker to perform actions on behalf of an authenticated user. Affected component: Ck...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. Root cause: improper validation in file upload handling leading to unauthorized path access. CVSSv3.1 base score 7.5 (HIGH) with NETWORK attack vector and low complexity; confidentiality impact High. Exploitati...