CVE-2026-120319

A vulnerability exists in Sanluan PublicCMS versions 4.x/5.x/6.x within the publiccms-trade component. The flaw resides in the TradeRefundService.updateAmound function, specifically located in the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradeRefundSer...

EUVD-2026-114922

A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function TradeRefundService.updateAmound of the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradeRefundService.java of the component publiccms-trade. Performing a manipulation of...

PublicCMS security vulnerabilities

PublicCMS is an open-source content management system CMS developed in Java by PublicCMS Company in China. Version Sanluan PublicCMS 5.202506.d contains a security vulnerability. This vulnerability stems from a business logic error in the...