447 matches found
CVE-2025-65837
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...
CVE-2025-65838
PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...
CVE-2025-65836
PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...
CVE-2025-65840
PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...
EUVD-2025-200083
PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...
EUVD-2025-200088
PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...
EUVD-2025-200089
PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...
CVE-2025-65840
PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...
CVE-2025-65838
PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...
CVE-2025-65836
PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...
PT-2025-48547
PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...
CVE-2025-65836
PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController...
PublicCMS 安全漏洞
PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which stems from a path traversal in the doUploadSitefile method...
CVE-2025-65840
PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...
CVE-2025-65836
PublicCMS V5.202506.b is vulnerable to Server-Side Request Forgery (SSRF) via the SimpleAiAdminController chat interface. Root cause details are not provided beyond the SSRF label in the chat interface. Impact is described in sources as SSRF with high severity, but no explicit exploit path or aff...
PT-2025-48548
Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b is susceptible to a Cross Site Request Forgery CSRF issue within the CkEditorAdminController. This allows an attacker to potentially perform actions on behalf of an...
CVE-2025-65840
PublicCMS V5.202506.b is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the CkEditorAdminController. The CVE-2025-65840 entry reports a HIGH-severity issue (CVSS 3.1: 8.8) that could enable an attacker to perform actions on behalf of an authenticated user. Affected component: Ck...
PublicCMS 安全漏洞
PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which originates from a cross-site request forgery in CkEditorAdminController...
CVE-2025-65838
PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. Root cause: improper validation in file upload handling leading to unauthorized path access. CVSSv3.1 base score 7.5 (HIGH) with NETWORK attack vector and low complexity; confidentiality impact High. Exploitati...