CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module. The connected documents consistently identify the vulnerable component as the Content Search feature and describe the root cause as an XSS vulnerability. Reported CVSS v3.1 base score is 5.4 (MEDIUM) w...

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

PT-2025-48547

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...