CVE-2025-14364

CVE-2025-14364 Demo Importer Plus Authenticated Subscriber → Administrator viado-reinstall AJAX action 〔 1 〕 Vulnerability Root Cause: Ajax::handlerequest registers the demoimporterplus AJAX action without calling currentusercan. Any authenticated subscriber can send "demoaction":"do-reinstall" t...

File Deletion Vulnerability in ShuipFCMS Content Management System

ShuipFCMS a content management system based on ThinkPHP framework as the core, using an independent grouping approach to development. ShuipFCMS content management system file deletion vulnerability, an attacker can be exploited to delete the install.lock file can lead to the reinstallation of the...