Lucene search

Hongcms Security Vulnerabilities - 2023

cve

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter.

8.8CVSS

9AI Score

0.003EPSS

2023-06-20 03:15 PM

cve

CVE-2020-21643

Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.

6.1CVSS

6AI Score

0.001EPSS

2023-04-28 08:15 PM