CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

PT-2025-52683

Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b has a Cross Site Scripting XSS issue in the Content Search module. The issue allows for the injection of malicious scripts through the Content Search functionality. The...

CVE-2025-65837: Improper Neutralization of Input During Web Page Generation

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b. The vulnerability stems from the content search module being susceptible to cross-site scripting attacks...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

CVE-2025-65836

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

EUVD-2025-200083

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

EUVD-2025-200089

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

EUVD-2025-200088

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

CVE-2025-65836

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. Root cause: improper validation in file upload handling leading to unauthorized path access. CVSSv3.1 base score 7.5 (HIGH) with NETWORK attack vector and low complexity; confidentiality impact High. Exploitati...

CVE-2025-65836

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...

PT-2025-48548

Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b is susceptible to a Cross Site Request Forgery CSRF issue within the CkEditorAdminController. This allows an attacker to potentially perform actions on behalf of an...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which stems from a path traversal in the doUploadSitefile method...

CVE-2025-65836

The open-source Java-based content management system PublicCMS version V5.202506.b is vulnerable to Server-Side Request Forgery (SSRF) . The flaw exists within the chat interface of the SimpleAiAdminController component. This vulnerability allows an attacker to cause the application to make reque...

PT-2025-48542

Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b is susceptible to a Server-Side Request Forgery SSRF condition. This issue is located within the chat interface of the SimpleAiAdminController. SSRF occurs when an applicati...